Dockerfile.art

FROM registry-proxy.engineering.redhat.com/rh-osbs/openshift-golang-builder:v1.24.6-202510150934.g4284440.el9 AS builder

ENV GOEXPERIMENT=strictfipsruntime
ENV CGO_ENABLED=1
ENV GOOS=linux
ENV GOFLAGS=""

COPY . /opt/app-root/src/opa-openshift
WORKDIR /opt/app-root/src/opa-openshift

RUN go build -tags strictfipsruntime -a -ldflags '-s -w' -o ./opa-openshift .

FROM registry.access.redhat.com/ubi9/ubi-minimal

COPY --from=builder /opt/app-root/src/opa-openshift/opa-openshift /usr/bin/opa-openshift

EXPOSE 80
ENTRYPOINT ["/usr/bin/opa-openshift"]

LABEL com.redhat.component="opa-openshift-container" \
      description="An OPA-compatible API for making OpenShift access review requests" \
      distribution-scope="subscription" \
      io.k8s.description="An OPA-compatible API for making OpenShift access review requests" \
      io.k8s.display-name="OPA OpenShift" \
      io.openshift.maintainer.component="Logging" \
      io.openshift.maintainer.product="OpenShift Container Platform" \
      io.openshift.tags="openshift,logging,loki" \
      maintainer="AOS Logging <team-logging@redhat.com>" \
      name="openshift-logging/opa-openshift-rhel9" \
      summary="An OPA-compatible API for making OpenShift access review requests" \
      url="https://github.com/observatorium/opa-openshift/" \
      vendor="Red Hat, Inc." \
      version_minor="v0.1" \
      version=v0.1.0