pki (1b5f1c7)
Published 2026-09-09 02:45:08 +00:00 by Dvorak
Installation
docker pull hub.kl1.tenere.ai/orchestrator/pki:1b5f1c7sha256:a2a0310657ad66cca76903c982d63ee88b09d87fa38da759d2518bb8d1564f49
Images
| Digest | OS / Arch | Size |
|---|---|---|
| 531c0961cd | linux/amd64 | 46 MiB |
Image Layers ( linux/amd64)
| ADD alpine-minirootfs-3.21.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV STEP=/home/step |
| ENV STEPPATH=/home/step |
| ARG STEPUID=1000 |
| ARG STEPGID=1000 |
| RUN |2 STEPUID=1000 STEPGID=1000 /bin/sh -c apk update && apk upgrade && apk add --no-cache bash curl tzdata && addgroup -g ${STEPGID} step && adduser -D -u ${STEPUID} -G step step && chown step:step /home/step # buildkit |
| COPY /src/bin/step /usr/local/bin/step # buildkit |
| USER step |
| WORKDIR /home/step |
| STOPSIGNAL SIGTERM |
| CMD ["/bin/sh" "-c" "/bin/bash"] |
| COPY /src/bin/step-ca /usr/local/bin/step-ca # buildkit |
| COPY /usr/local/bin/step-kms-plugin /usr/local/bin/step-kms-plugin # buildkit |
| USER step |
| ENV CONFIGPATH=/home/step/config/ca.json |
| ENV PWDPATH=/home/step/secrets/password |
| VOLUME [/home/step] |
| STOPSIGNAL SIGTERM |
| HEALTHCHECK &{["CMD-SHELL" "step ca health 2>/dev/null | grep \"^ok\" >/dev/null"] "0s" "0s" "0s" "0s" '\x00'} |
| COPY docker/entrypoint.sh /entrypoint.sh # buildkit |
| ENTRYPOINT ["/bin/bash" "/entrypoint.sh"] |
| CMD ["/bin/sh" "-c" "exec /usr/local/bin/step-ca --password-file $PWDPATH $CONFIGPATH"] |
| COPY config/ca.json /opt/pki/templates/ca.json # buildkit |
| COPY templates/ /opt/pki/templates/ # buildkit |
| HEALTHCHECK {Test:[CMD-SHELL step ca health --ca-url https://localhost:9000 --root /home/step/certs/root_ca.crt 2>/dev/null | grep "^ok" >/dev/null] Interval:30s Timeout:5s StartPeriod:40s StartInterval:0s Retries:3} |
Labels
| Key | Value |
|---|---|
| org.opencontainers.image.revision | 1b5f1c737d2672b830a5cb0d18084da69adffd96 |
| org.opencontainers.image.source | https://hub.kl1.tenere.ai/orchestrator/pki |
| org.opencontainers.image.version | 1b5f1c7 |