Dockerfile.ubi

FROM registry.redhat.io/ubi8/ubi

MAINTAINER engineering@armory.io

### Atomic/OpenShift Labels - https://github.com/projectatomic/ContainerApplicationGenericLabels
LABEL name="halyard" \
      maintainer="engineering@armory.io" \
      vendor="armory" \
      summary="halyard" \
      description="A tool for configuring, installing, and updating Spinnaker."

### add licenses
COPY LICENSE.txt /licenses/LICENSE.txt

COPY halyard-web/build/install/halyard /opt/halyard

ENV KUBECTL_RELEASE=1.15.10
ENV AWS_BINARY_RELEASE_DATE=2020-02-22
ENV AWS_CLI_VERSION=1.18.58

RUN yum update -y --disableplugin=subscription-manager \
  && yum install -y --disableplugin=subscription-manager \
  python27 \
  bash \
  curl \
  java-11-openjdk \
  openssl \
  && pip2 install --upgrade awscli==${AWS_CLI_VERSION}

RUN rm -rf /var/cache/apk/*

RUN echo '#!/usr/bin/env bash' > /usr/local/bin/hal && \
  echo '/opt/halyard/bin/hal "$@"' > /usr/local/bin/hal && \
  chmod +x /usr/local/bin/hal

RUN curl -f -LO --retry 3 --retry-delay 3 https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_RELEASE}/bin/linux/amd64/kubectl && \
    chmod +x ./kubectl && \
    mv ./kubectl /usr/local/bin/kubectl

RUN curl -f -o aws-iam-authenticator https://amazon-eks.s3-us-west-2.amazonaws.com/${KUBECTL_RELEASE}/${AWS_BINARY_RELEASE_DATE}/bin/linux/amd64/aws-iam-authenticator && \
  chmod +x ./aws-iam-authenticator && \
  mv ./aws-iam-authenticator /usr/local/bin/aws-iam-authenticator

ENV PATH "$PATH:/usr/local/bin/aws-iam-authenticator"

RUN groupadd -g 1000 spinnaker
RUN adduser -g spinnaker -u 1000 spinnaker
USER spinnaker

CMD ["/opt/halyard/bin/halyard"]