ARG DISTRO_VERSION="3.20"
ARG VERSION="0.6.27"

FROM alpine:${DISTRO_VERSION}
ARG DISTRO_VERSION
ARG VERSION

RUN adduser -D -u 10000 aws-iam-authenticator
RUN apk add --update ca-certificates

RUN echo "@kubezero https://cdn.zero-downtime.net/alpine/v${DISTRO_VERSION}/kubezero" >> "/etc/apk/repositories"
RUN wget -q -O /etc/apk/keys/stefan@zero-downtime.net-61bb6bfb.rsa.pub https://cdn.zero-downtime.net/alpine/stefan@zero-downtime.net-61bb6bfb.rsa.pub

RUN apk -U --no-cache add \
  aws-iam-authenticator@kubezero=~$VERSION

FROM scratch

COPY --from=0 /etc/passwd /etc/passwd
COPY --from=0 /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=0 /lib/ld-musl-*.so.1 /lib/
COPY --from=0 /usr/bin/aws-iam-authenticator /aws-iam-authenticator

USER aws-iam-authenticator
ENTRYPOINT ["/aws-iam-authenticator"]