FROM alt:sisyphus

RUN apt-get update && \
    apt-get install -y cert-manager; \
    rm -f /var/cache/apt/archives/*.rpm \
          /var/cache/apt/*.bin \
          /var/lib/apt/lists/*.*

RUN groupadd -r -g 1000 cert-manger && useradd --no-log-init -r -u 1000 -g cert-manger cert-manger

USER 1000

ENTRYPOINT ["/usr/bin/cainjector"]