Dockerfile

ARG GO_VERSION="1.25.4"
ARG ALPINE_VERSION="3.21"
ARG GLOBAL_KUBE_VERSION="v1.34.2"
ARG GLOBAL_HELM_VERSION="v4.0.4"
ARG GLOBAL_HELM_DIFF_VERSION="v3.15.2"
ARG GLOBAL_HELM_GCS_VERSION="0.4.2"
ARG GLOBAL_HELM_S3_VERSION="v0.16.3"
ARG GLOBAL_HELM_SECRETS_VERSION="v4.7.4"
ARG GLOBAL_SOPS_VERSION="v3.10.2"

### Helm Installer ###
FROM alpine:${ALPINE_VERSION} AS helm-installer
ARG GLOBAL_KUBE_VERSION
ARG GLOBAL_HELM_VERSION
ARG GLOBAL_HELM_DIFF_VERSION
ARG GLOBAL_HELM_GCS_VERSION
ARG GLOBAL_HELM_S3_VERSION
ARG GLOBAL_HELM_SECRETS_VERSION
ARG GLOBAL_SOPS_VERSION
ENV KUBE_VERSION=$GLOBAL_KUBE_VERSION
ENV HELM_VERSION=$GLOBAL_HELM_VERSION
ENV HELM_DIFF_VERSION=$GLOBAL_HELM_DIFF_VERSION
ENV HELM_GCS_VERSION=$GLOBAL_HELM_GCS_VERSION
ENV HELM_S3_VERSION=$GLOBAL_HELM_S3_VERSION
ENV HELM_SECRETS_VERSION=$GLOBAL_HELM_SECRETS_VERSION
ENV SOPS_VERSION=$GLOBAL_SOPS_VERSION
ENV HELM_DIFF_THREE_WAY_MERGE=true

RUN apk add --update --no-cache ca-certificates git openssh-client openssl ruby curl wget tar gzip make bash \
  && curl -L https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.amd64 -o /usr/local/bin/sops \
  && chmod +x /usr/local/bin/sops \
  && curl --retry 5 -L https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kubectl -o /usr/local/bin/kubectl \
  && chmod +x /usr/local/bin/kubectl \
  && curl --retry 5 -Lk https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz | tar zxv -C /tmp \
  && mv /tmp/linux-amd64/helm /usr/local/bin/helm && rm -rf /tmp/linux-amd64 \
  && chmod +x /usr/local/bin/helm

RUN VERIFY_FLAG=""; \
  case "${HELM_VERSION}" in v4*) VERIFY_FLAG="--verify=false";; esac; \
  helm plugin install $VERIFY_FLAG https://github.com/hypnoglow/helm-s3.git --version ${HELM_S3_VERSION} \
  && helm plugin install $VERIFY_FLAG https://github.com/nouney/helm-gcs --version ${HELM_GCS_VERSION} \
  && helm plugin install $VERIFY_FLAG https://github.com/databus23/helm-diff --version ${HELM_DIFF_VERSION} \
  && helm plugin install $VERIFY_FLAG https://github.com/jkroepke/helm-secrets --version ${HELM_SECRETS_VERSION}

### Go Builder ###
FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS builder

RUN apk add --update --no-cache ca-certificates make

WORKDIR /go/src/github.com/mkubaczyk/helmsman

COPY go.mod go.sum ./
RUN go mod download

COPY . .

ARG VERSION="dev"
RUN CGO_ENABLED=0 go build -o helmsman -ldflags "-X github.com/mkubaczyk/helmsman/internal/app.appVersion=${VERSION} -extldflags '-static'" cmd/helmsman/main.go

### Final Image ###
FROM alpine:${ALPINE_VERSION} AS base

RUN apk add --update --no-cache ca-certificates git openssh-client ruby curl bash gnupg gcompat \
  && gem install hiera-eyaml hiera-eyaml-gkms --no-doc \
  && update-ca-certificates

COPY --from=helm-installer /usr/local/bin/kubectl /usr/local/bin/kubectl
COPY --from=helm-installer /usr/local/bin/helm /usr/local/bin/helm
COPY --from=helm-installer /usr/local/bin/sops /usr/local/bin/sops
COPY --from=helm-installer /root/.cache/helm/plugins/ /root/.cache/helm/plugins/
COPY --from=helm-installer /root/.local/share/helm/plugins/ /root/.local/share/helm/plugins/

COPY --from=builder /go/src/github.com/mkubaczyk/helmsman/helmsman /bin/helmsman

ENTRYPOINT ["/bin/helmsman"]