FROM alpine:3.6

RUN apk add --no-cache ca-certificates && \
  addgroup -S certmanager && adduser -S -G certmanager certmanager

ADD cert-manager-controller_linux_amd64 /usr/bin/cert-manager

USER certmanager

ENTRYPOINT ["/usr/bin/cert-manager"]
ARG VCS_REF
LABEL org.label-schema.vcs-ref=$VCS_REF \
      org.label-schema.vcs-url="https://github.com/jetstack/cert-manager" \
      org.label-schema.license="Apache-2.0"