The webhook image needlessly used the distroless image containing glibc. The webhook server is a static binary, so it can be packaged using the distroless/static image like the other components.
8 lines
257 B
Docker
8 lines
257 B
Docker
FROM gcr.io/distroless/static:latest
|
|
LABEL maintainers="Kubernetes Authors"
|
|
LABEL description="Snapshot Validation Webhook"
|
|
ARG binary=./bin/snapshot-validation-webhook
|
|
|
|
COPY ${binary} snapshot-validation-webhook
|
|
ENTRYPOINT ["/snapshot-validation-webhook"]
|