Dockerfile

# Easy crosscomple toolkit
FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.5.0 AS xx

# Build the manager binary
FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23 AS builder
ARG TARGETOS
ARG TARGETARCH
ARG TARGETPLATFORM
COPY --from=xx / /

WORKDIR /workspace
# Copy the Go Modules manifests
COPY go.mod go.mod
COPY go.sum go.sum
# cache deps before building and copying source so that we don't need to re-download as much
# and so that source changes don't invalidate our downloaded layer
RUN xx-go mod download

# Copy the go source
COPY cmd/main.go cmd/main.go
COPY internal/ internal/

# Build
ENV CGO_ENABLED=0
RUN xx-go build -a -o manager cmd/main.go && \
    xx-verify manager

# Use distroless as minimal base image to package the manager binary
# Refer to https://github.com/GoogleContainerTools/distroless for more details
FROM gcr.io/distroless/static:nonroot
WORKDIR /
COPY --from=builder /workspace/manager .
USER 65532:65532

ENTRYPOINT ["/manager"]