FROM arm64v8/debian:bookworm-slim

# Non-root user
RUN groupadd -r app && useradd -r -g app app

# Copy binary
COPY pod-reaper /usr/local/bin/pod-reaper
RUN chmod +x /usr/local/bin/pod-reaper

# Set workdir
WORKDIR /app
USER app

ENTRYPOINT ["/usr/local/bin/pod-reaper"]