Dockerfile.release

FROM --platform=linux/amd64 registry.access.redhat.com/ubi8/ubi-minimal:8.7 as build

RUN microdnf update --nodocs && microdnf install ca-certificates --nodocs
RUN  curl -s -q https://raw.githubusercontent.com/minio/kes/master/LICENSE -o LICENSE
RUN  curl -s -q https://raw.githubusercontent.com/minio/kes/master/CREDITS -o CREDITS

FROM registry.access.redhat.com/ubi8/ubi-micro:8.7

ARG TAG

LABEL name="MinIO" \
      vendor="MinIO Inc <dev@min.io>" \
      maintainer="MinIO Inc <dev@min.io>" \
      version="${TAG}" \
      release="${TAG}" \
	  summary="KES is a cloud-native distributed key management and encryption server designed to build zero-trust infrastructures at scale."

# On RHEL the certificate bundle is located at:
# - /etc/pki/tls/certs/ca-bundle.crt (RHEL 6)
# - /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem (RHEL 7)
COPY --from=build /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/

COPY --from=build LICENSE /LICENSE
COPY --from=build CREDITS /CREDITS
COPY kes /kes

EXPOSE 7373

ENTRYPOINT ["/kes"]