diff --git a/Dockerfile b/Dockerfile
index def2cb51..9806fb31 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,8 +22,28 @@ WORKDIR /opt/keycloak
 
 RUN /opt/keycloak/bin/kc.sh build
 
+# final keycloak image
+
 FROM quay.io/keycloak/keycloak:22.0
 
+# OCI annotations to image
+LABEL org.opencontainers.image.authors="Camunda" \
+      org.opencontainers.image.title="Camunda keycloak" \
+      org.opencontainers.image.description="Camunda keycloak image" \
+      org.opencontainers.image.documentation="https://hub.docker.com/camunda/keycloak/" \
+      org.opencontainers.image.base.name="docker.io/camunda/keycloak:latest" \
+      org.opencontainers.image.licenses="???" \
+      org.opencontainers.image.source="https://github.com/camunda/container-keycloak" \
+      org.opencontainers.image.vendor="Camunda" \
+      org.opencontainers.image.version="TODO: SET AS ARGUMENT" \
+      org.opencontainers.image.url="https://github.com/camunda/container-keycloak" \
+      org.opencontainers.image.created="TODO: define at runtime" \
+      org.opencontainers.image.revision="TODO: define at runtime" \
+      org.opencontainers.image.ref.name="TODO: TBD" \
+      org.opencontainers.image.base.digest="TODO: TBD" \
+      org.opencontainers.image.base.name="quay.io/keycloak/keycloak" \
+      org.opencontainers.image.base.digest="TODO: TBD"
+
 # Enable health and metrics support
 ENV KC_HEALTH_ENABLED=true
 ENV KC_METRICS_ENABLED=true