zentinel-agent-spiffe/Dockerfile at main · zentinelproxy/zentinel-agent-spiffe · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# syntax=docker/dockerfile:1.4

# Zentinel SPIFFE Agent Container Image
#
# Targets:
#   - prebuilt: For CI with pre-built binaries

################################################################################
# Pre-built binary stage (for CI builds)
################################################################################
FROM gcr.io/distroless/cc-debian12:nonroot AS prebuilt

COPY zentinel-spiffe-agent /zentinel-spiffe-agent

LABEL org.opencontainers.image.title="Zentinel SPIFFE Agent" \
      org.opencontainers.image.description="Zentinel SPIFFE Agent for Zentinel reverse proxy" \
      org.opencontainers.image.vendor="Raskell" \
      org.opencontainers.image.source="https://github.com/zentinelproxy/zentinel-agent-spiffe"

ENV RUST_LOG=info,zentinel_spiffe_agent=debug \
    SOCKET_PATH=/var/run/zentinel/spiffe.sock

USER nonroot:nonroot

ENTRYPOINT ["/zentinel-spiffe-agent"]