mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-11-01 12:59:01 +00:00
25 lines
1.2 KiB
Docker
25 lines
1.2 KiB
Docker
FROM golang:1.8
|
|
WORKDIR /kube-bench
|
|
RUN go get github.com/aquasecurity/kube-bench
|
|
RUN cp /go/bin/kube-bench /kube-bench/ && chmod +x /kube-bench/kube-bench
|
|
WORKDIR /kube-bench/cfg
|
|
RUN wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/config.yaml && \
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/federated.yaml && \
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/master.yaml && \
|
|
wget https://raw.githubusercontent.com/aquasecurity/kube-bench/master/cfg/node.yaml
|
|
# When Docker Hub supports it, we would split this into a multi-stage build with the second part based on, say, alpine for size
|
|
WORKDIR /
|
|
ADD entrypoint.sh /entrypoint.sh
|
|
ENTRYPOINT /entrypoint.sh
|
|
|
|
# Build-time metadata as defined at http://label-schema.org
|
|
ARG BUILD_DATE
|
|
ARG VCS_REF
|
|
LABEL org.label-schema.build-date=$BUILD_DATE \
|
|
org.label-schema.name="kube-bench" \
|
|
org.label-schema.description="Run the CIS Kubernetes Benchmark tests" \
|
|
org.label-schema.url="https://github.com/aquasecurity/kube-bench" \
|
|
org.label-schema.vcs-ref=$VCS_REF \
|
|
org.label-schema.vcs-url="https://github.com/aquasecurity/kube-bench" \
|
|
org.label-schema.schema-version="1.0"
|