2017-06-20 09:53:28 +00:00
|
|
|
FROM golang:1.8
|
2017-06-20 06:53:34 +00:00
|
|
|
WORKDIR /kube-bench
|
2017-06-20 09:53:28 +00:00
|
|
|
RUN go get github.com/aquasecurity/kube-bench
|
|
|
|
|
RUN cp /go/bin/kube-bench /kube-bench/ && chmod +x /kube-bench/kube-bench
|
|
|
|
|
WORKDIR /kube-bench/cfg
|
2017-06-20 07:42:37 +00:00
|
|
|
RUN wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/config.yaml && \
|
|
|
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/federated.yaml && \
|
|
|
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/master.yaml && \
|
|
|
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/node.yaml
|
2017-06-20 09:53:28 +00:00
|
|
|
# When Docker Hub supports it, we would split this into a multi-stage build with the second part based on, say, alpine for size
|
|
|
|
|
WORKDIR /
|
2017-06-20 06:53:34 +00:00
|
|
|
ADD entrypoint.sh /entrypoint.sh
|
|
|
|
|
ENTRYPOINT /entrypoint.sh
|
2017-06-22 15:15:12 +00:00
|
|
|
|
|
|
|
|
# Build-time metadata as defined at http://label-schema.org
|
|
|
|
|
ARG BUILD_DATE
|
|
|
|
|
ARG VCS_REF
|
|
|
|
|
LABEL org.label-schema.build-date=$BUILD_DATE \
|
|
|
|
|
org.label-schema.name="kube-bench" \
|
|
|
|
|
org.label-schema.description="Run the CIS Kubernetes Benchmark tests" \
|
|
|
|
|
org.label-schema.url="https://github.com/aquasecurity/kube-bench" \
|
|
|
|
|
org.label-schema.vcs-ref=$VCS_REF \
|
|
|
|
|
org.label-schema.vcs-url="https://github.com/aquasecurity/kube-bench" \
|
|
|
|
|
org.label-schema.schema-version="1.0"
|
