FROM alpine:3.17@sha256:c8deccde20bcc319a17c28ce674b80b9b7e945a8b460a11272b7f0a3e0d6a746

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="kube-tools"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/docker/kube-tools"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/docker/kube-tools"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/docker/kube-tools"

ARG KUBECTL_VERSION
ARG YQ_VERSION
ARG HELM_VERSION
ARG KUSTOMIZE_VERSION
ARG KUBECONFORM_VERSION
ARG CALICO_VERSION
ARG FLUXCD_VERSION

# renovate: datasource=github-releases depName=kubernetes/kubernetes
ENV KUBECTL_VERSION="${KUBECTL_VERSION:-v1.26.1}"
# renovate: datasource=github-releases depName=mikefarah/yq
ENV YQ_VERSION="${YQ_VERSION:-v4.30.8}"
# renovate: datasource=github-releases depName=helm/helm
ENV HELM_VERSION="${HELM_VERSION:-v3.11.1}"
# renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
ENV KUSTOMIZE_VERSION="${KUSTOMIZE_VERSION:-v5.0.0}"
# renovate: datasource=github-releases depName=yannh/kubeconform
ENV KUBECONFORM_VERSION="${KUBECONFORM_VERSION:-v0.5.0}"
# renovate: datasource=github-releases depName=projectcalico/calico
ENV CALICO_VERSION="${CALICO_VERSION:-v3.25.0}"
# renovate: datasource=github-releases depName=fluxcd/flux2
ENV FLUXCD_VERSION="${FLUXCD_VERSION:-v0.39.0}"
# renovate: datasource=github-releases depName=cert-manager/cert-manager
ENV CERTMANAGER_VERSION="${CERTMANAGER_VERSION:-v1.11.0}"

RUN apk --update add curl tar bash python3 py3-yaml && \
    curl -SsfL -o /usr/local/bin/kubectl "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
    curl -SsfL -o /usr/local/bin/kubectl-convert "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl-convert" && \
    curl -SsfL -o /usr/local/bin/yq "https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_amd64" && \
    curl -SsfL "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" \
        | tar xz --strip-components=1 -C /usr/local/bin linux-amd64/helm && \
    curl -SsfL "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz" \
        | tar xz -C /usr/local/bin kustomize && \
    curl -SsfL "https://github.com/yannh/kubeconform/releases/download/${KUBECONFORM_VERSION}/kubeconform-linux-amd64.tar.gz" \
        | tar xz -C /usr/local/bin kubeconform && \
    curl -SsfL -o /usr/local/bin/openapi2jsonschema "https://raw.githubusercontent.com/yannh/kubeconform/${KUBECONFORM_VERSION}/scripts/openapi2jsonschema.py" && \
    chmod 755 /usr/local/bin/kubectl && \
    chmod 755 /usr/local/bin/kubectl-convert && \
    chmod 755 /usr/local/bin/yq && \
    chmod 755 /usr/local/bin/helm && \
    chmod 755 /usr/local/bin/kustomize && \
    chmod 755 /usr/local/bin/kubeconform && \
    chmod 755 /usr/local/bin/openapi2jsonschema && \
    mkdir -p /etc/kube-tools/schemas/flux/master-standalone-strict && \
    mkdir -p /etc/kube-tools/schemas/calico/master-standalone-strict && \
    mkdir -p /etc/kube-tools/schemas/cert-manager/master-standalone-strict && \
    curl -SsfL "https://github.com/fluxcd/flux2/releases/download/${FLUXCD_VERSION}/crd-schemas.tar.gz" \
        | tar xz -C /etc/kube-tools/schemas/flux/master-standalone-strict && \
    curl -SsfL -o /tmp/calico.crds.yaml "https://raw.githubusercontent.com/projectcalico/calico/${CALICO_VERSION}/manifests/calico.yaml" && \
    cd /etc/kube-tools/schemas/calico/master-standalone-strict && \
    openapi2jsonschema /tmp/calico.crds.yaml && \
    for file in *.json ; do mv $file ${file//_v1/_v3} ; done && \
    curl -SsfL -o /tmp/cert-manager.crds.yaml "https://github.com/cert-manager/cert-manager/releases/download/${CERTMANAGER_VERSION}/cert-manager.crds.yaml" && \
    cd /etc/kube-tools/schemas/cert-manager/master-standalone-strict && \
    openapi2jsonschema /tmp/cert-manager.crds.yaml && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/*

ADD overlay/ /

STOPSIGNAL SIGTERM

CMD []