# Copyright 2020-2021 Authors of Cilium

# SPDX-License-Identifier: Apache-2.0

ARG BASE_IMAGE=scratch

ARG GOLANG_IMAGE=docker.io/library/golang:1.23.3@sha256:73f06be4578c9987ce560087e2e2ea6485fb605e3910542cadd8fa09fc5f3e31

ARG ALPINE_IMAGE=docker.io/library/alpine:3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a

# BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.

# Represents the plataform where the build is happening, do not mix with

# TARGETARCH

FROM --platform=${BUILDPLATFORM} ${GOLANG_IMAGE} AS builder

# TARGETOS is an automatic platform ARG enabled by Docker BuildKit.

ARG TARGETOS

# TARGETARCH is an automatic platform ARG enabled by Docker BuildKit.

ARG TARGETARCH

ARG NOSTRIP

ARG TETRAGON_VERSION

WORKDIR /go/src/github.com/cilium/tetragon

RUN --mount=type=bind,readwrite,target=/go/src/github.com/cilium/tetragon --mount=target=/root/.cache,type=cache --mount=target=/go/pkg/mod,type=cache \

make GOARCH=${TARGETARCH} VERSION=${TETRAGON_VERSION} tetragon-operator \

&& mkdir -p /out/${TARGETOS}/${TARGETARCH}/usr/bin && mv tetragon-operator /out/${TARGETOS}/${TARGETARCH}/usr/bin

# BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.

# Represents the plataform where the build is happening, do not mix with

# TARGETARCH

FROM --platform=${BUILDPLATFORM} ${ALPINE_IMAGE} AS certs

RUN apk --update add ca-certificates

FROM ${BASE_IMAGE} AS release

# TARGETOS is an automatic platform ARG enabled by Docker BuildKit.

ARG TARGETOS

# TARGETARCH is an automatic platform ARG enabled by Docker BuildKit.

ARG TARGETARCH

LABEL maintainer="[email protected]"

COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt

COPY --from=builder /out/${TARGETOS}/${TARGETARCH}/usr/bin/tetragon-operator /usr/bin/tetragon-operator

WORKDIR /

ENV GOPS_CONFIG_DIR=/

ENTRYPOINT ["/usr/bin/tetragon-operator"]

FROM release