Containerfile.operator

FROM registry.access.redhat.com/ubi9/go-toolset:1.21 as builder

COPY . .

# Go toolset runs as user default(1001) with group root. To be able to build in
# rootless mode as podman and ocp do, it is necessary to give permissions for
# file creation to the root group, of which the user default is a member.
#
# Due to CVE-2022-24765, git refuses actions on .git repository it does not own
# Since the COPY command leaves the owner as root but the build is done as the
# default user, we need to set the global git config to consider the working
# directory as a safe one
RUN chmod g+w . && \
  git config --global --add safe.directory "$PWD" && \
  make build

FROM registry.redhat.io/rhel9-4-els/rhel:9.4
COPY --from=builder \
  /opt/app-root/src/bin/hypershift \
  /opt/app-root/src/bin/hcp \
  /opt/app-root/src/bin/hypershift-operator \
  /opt/app-root/src/bin/control-plane-operator \
  /opt/app-root/src/bin/control-plane-pki-operator \
  /usr/bin/

RUN cd /usr/bin && \
  ln -s control-plane-operator ignition-server && \
  ln -s control-plane-operator konnectivity-socks5-proxy && \
  ln -s control-plane-operator availability-prober && \
  ln -s control-plane-operator token-minter

ENTRYPOINT ["/usr/bin/hypershift"]

LABEL name="multicluster-engine/hypershift-operator"
LABEL description="HyperShift Operator is an operator to manage the lifecycle of Hosted Clusters"
LABEL summary="HyperShift Operator"
LABEL url="https://catalog.redhat.com/software/containers/multicluster-engine/hypershift-rhel8-operator/"
LABEL version=4.16
LABEL com.redhat.component="multicluster-engine-hypershift-operator"
LABEL io.k8s.description="HyperShift Operator"
LABEL io.k8s.display-name="hypershift-operator"
LABEL io.openshift.tags="data,images"
LABEL io.openshift.hypershift.control-plane-operator-subcommands=true
LABEL io.openshift.hypershift.control-plane-operator-skips-haproxy=true
LABEL io.openshift.hypershift.ignition-server-healthz-handler=true
LABEL io.openshift.hypershift.control-plane-operator-manages-ignition-server=true
LABEL io.openshift.hypershift.control-plane-operator-manages.cluster-machine-approver=true
LABEL io.openshift.hypershift.control-plane-operator-manages.cluster-autoscaler=true
LABEL io.openshift.hypershift.control-plane-operator-manages.decompress-decode-config=true
LABEL io.openshift.hypershift.control-plane-operator-creates-aws-sg=true
LABEL io.openshift.hypershift.control-plane-operator-applies-management-kas-network-policy-label=true
LABEL io.openshift.hypershift.restricted-psa=true
LABEL io.openshift.hypershift.control-plane-pki-operator-signs-csrs=true
LABEL io.openshift.hypershift.hosted-cluster-config-operator-reports-node-count=true