fix: konflux build for image

Signed-off-by: Wen Zhou <wenzhou@redhat.com>

Author: zdtsw

Dockerfile.konflux

@@ -47,25 +47,37 @@ RUN case ${TARGETPLATFORM} in \
          "linux/arm/v6") GOARCH=arm GOARM=6  ;; \
          "linux/arm/v7") GOARCH=arm GOARM=7 ;; \
     esac && \
-    printf "Building FIPS-compliant OAuth2 Proxy for arch ${GOARCH}\n" && \
+    printf "Building FIPS-compliant kube-auth-proxy for arch ${GOARCH}\n" && \
     CGO_ENABLED=1 GOOS=linux GOARCH=${GOARCH} GOEXPERIMENT=strictfipsruntime \
     go build -a -tags strictfipsruntime \
     -ldflags="-X github.com/opendatahub-io/kube-auth-proxy/v1/pkg/version.VERSION=${VERSION}" \
     -o kube-auth-proxy github.com/opendatahub-io/kube-auth-proxy/v1 && \
-    touch jwt_signing_key.pem
+    touch jwt_signing_key.pem && \
+    printf "Building kube-rbac-proxy for arch ${GOARCH}\n" && \
+    VERSION_SEMVER=$(echo "${VERSION}" | grep -o 'v[0-9]\+\.[0-9]\+\.[0-9]\+' || echo "v0.19.1") && \
+    cd kube-rbac-proxy && GOARCH=${GOARCH} VERSION="${VERSION}" VERSION_SEMVER="${VERSION_SEMVER}" make build && \
+    cd .. && printf "Building entrypoint for arch ${GOARCH}\n" && \
+    CGO_ENABLED=1 GOOS=linux GOARCH=${GOARCH} GOEXPERIMENT=strictfipsruntime go build -a -tags strictfipsruntime -o entrypoint ./cmd/entrypoint
+
 
 # Copy binary to FIPS-compliant runtime image
 FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7c5495d5fad59aaee12abc3cbbd2b283818ee1e814b00dbc7f25bf2d14fa4f0c
 # Reload version
 ARG VERSION
 
 WORKDIR /
-COPY --from=builder $GOPATH/src/github.com/opendatahub-io/kube-auth-proxy/kube-auth-proxy /bin/kube-auth-proxy
-COPY --chown=1001:0 --from=builder $GOPATH/src/github.com/opendatahub-io/kube-auth-proxy/jwt_signing_key.pem /etc/ssl/private/jwt_signing_key.pem
+COPY --from=builder /workspace/kube-auth-proxy /bin/kube-auth-proxy
+COPY --from=builder /workspace/kube-rbac-proxy/_output/kube-rbac-proxy /bin/kube-rbac-proxy
+COPY --from=builder /workspace/entrypoint /bin/entrypoint
+COPY --chown=1001:0 --from=builder /workspace/jwt_signing_key.pem /etc/ssl/private/jwt_signing_key.pem
+
 
 # Set proper permissions for non-root execution
 RUN chown -R 1001:0 /etc/ssl/private && \
-    chmod -R g=u /etc/ssl/private
+    chmod -R g=u /etc/ssl/private && \
+    chown 1001:0 /bin/kube-auth-proxy /bin/kube-rbac-proxy /bin/entrypoint && \
+    chmod 755 /bin/kube-auth-proxy /bin/kube-rbac-proxy /bin/entrypoint
+
 
 USER 1001
 
@@ -77,4 +89,4 @@ LABEL org.opencontainers.image.licenses=MIT \
       org.opencontainers.image.title=kube-auth-proxy \
       org.opencontainers.image.version=${VERSION}
 
-ENTRYPOINT ["/bin/kube-auth-proxy"]
+ENTRYPOINT ["/bin/entrypoint"]