From 665eb7b65350f7c9d368b35e74b5b5ea0f0df816 Mon Sep 17 00:00:00 2001
From: Sebastian Widmer <sebastian.widmer@vshn.net>
Date: Fri, 17 Jan 2025 17:13:44 +0100
Subject: [PATCH] Replace `gcr.io` images

---
 Dockerfile                                   | 14 ++++++++++----
 config/default/manager_auth_proxy_patch.yaml |  2 +-
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3fe099d..61fb27d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,13 @@
-FROM gcr.io/distroless/static:nonroot
+FROM docker.io/library/alpine:3.21 as runtime
 
-WORKDIR /
-COPY scheduler-canary-controller manager
-USER 65532:65532
+RUN \
+  apk add --update --no-cache \
+    bash \
+    curl \
+    ca-certificates \
+    tzdata
 
 ENTRYPOINT ["/manager"]
+COPY scheduler-canary-controller manager
+
+USER 65536:0
diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml
index cec149a..6e6945a 100644
--- a/config/default/manager_auth_proxy_patch.yaml
+++ b/config/default/manager_auth_proxy_patch.yaml
@@ -15,7 +15,7 @@ spec:
           capabilities:
             drop:
               - "ALL"
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
+        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
         args:
         - "--secure-listen-address=0.0.0.0:8443"
         - "--upstream=http://127.0.0.1:8080/"