Dockerfile

############################################################
# Build image
############################################################
FROM golang:1.23-alpine AS builder

ARG VERSION
ARG BUILT_AT
ARG COMMIT

RUN apk update && apk add --no-cache git ca-certificates && update-ca-certificates

WORKDIR /app

COPY go.mod .
COPY go.sum .
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 go build \
    -ldflags="-w -s \
    -X main.version=$VERSION \
    -X main.commit=$COMMIT \
    -X main.builtAt=$BUILT_AT" \
    -o ./bin/kminion

############################################################
# Runtime Image
############################################################
FROM alpine:3
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=builder /app/bin/kminion /app/kminion
RUN addgroup -S redpanda \
    && adduser -S redpanda -G redpanda \
    && chmod o+rx /app/kminion \
    && apk upgrade --no-cache
USER redpanda

ENTRYPOINT ["/app/kminion"]