Dockerfile

# Build the manager binary
FROM golang:1.24-alpine AS builder

WORKDIR /workspace
# Copy the Go Modules manifests
COPY go.mod go.mod
COPY go.sum go.sum
# cache deps before building and copying source so that we don't need to re-download as much
# and so that source changes don't invalidate our downloaded layer
RUN go mod download

# Copy the go source
COPY cmd/ cmd/
COPY api/ api/
COPY pkg/ pkg/
COPY internal internal/

# Build
ENV CGO_ENABLED=0
RUN go build -a -ldflags="-s -w" -o conduit-operator cmd/operator/main.go

# The delta in size between alpine and distroless is negligent.
# Alpine is preferable as provides better access to tools inside the image, if needed.
# FROM gcr.io/distroless/static:nonroot

FROM alpine:3.21
WORKDIR /app
COPY --from=builder /workspace/conduit-operator /app
USER 65532:65532

ENTRYPOINT ["/app/conduit-operator"]