ARG SPIRE_VERSION=1.9.3
FROM ghcr.io/spiffe/spire-agent:${SPIRE_VERSION} AS upstream
FROM alpine:3.20

RUN apk add --no-cache ca-certificates tzdata

COPY --from=upstream /opt/spire/bin/spire-agent /usr/local/bin/spire-agent
COPY templates/agent.conf /etc/spire/templates/agent.conf
COPY entrypoint.agent.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["run", "-config", "/opt/spire/agent.conf"]