/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:5911db9f5450531429169fb3bc4d156204437f84bcda3e7b49af077219ecb148 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:57f009d4f4cb77bc277e064b341ab6fdc0d69d350d43f8a21909f2baad049960 in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:57f009d4f4cb77bc277e064b341ab6fdc0d69d350d43f8a21909f2baad049960 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="812a20485e9d8d728e95b468c2886da21352b9fc" "org.opencontainers.image.revision"="812a20485e9d8d728e95b468c2886da21352b9fc" "build-date"="2026-01-22T04:46:44Z" "org.opencontainers.image.created"="2026-01-22T04:46:44Z" "release"="1769056855"org.opencontainers.image.revision=812a20485e9d8d728e95b468c2886da21352b9fc,org.opencontainers.image.created=2026-01-22T04:46:44Z

ARG IC_VERSION=5.3.2

ARG NGINX_OSS_VERSION=1.29.4

ARG NGINX_AGENT_VERSION=3.6

LABEL name=NGINX Ingress Controller maintainer=kubernetes@nginx.com vendor=NGINX Inc version=5.3.2 release=1 summary=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. description=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.k8s.description=NGINX Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.openshift.tags=nginx,ingress-controller,ingress,controller,kubernetes,openshift

COPY --chown=101:0 LICENSE /licenses/ # buildkit

SHELL [/bin/bash -o pipefail -c]

RUN |3 IC_VERSION=5.3.2 NGINX_OSS_VERSION=1.29.4 NGINX_AGENT_VERSION=3.6 /bin/bash -o pipefail -c ubi-setup.sh && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-installed && microdnf --nodocs --setopt=install_weak_deps=0 install -y diffutils dnf && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-new && dnf install -y /ubi-bin/*.rpm && dnf -q repoquery --resolve --requires --recursive --whatrequires nginx --queryformat "%{NAME}" > pkgs-nginx && dnf --setopt=protected_packages= remove -y $(comm -13 pkgs-installed pkgs-new | comm -13 pkgs-nginx -) && rm pkgs-installed pkgs-new pkgs-nginx && printf "%s\n" "[nginx]" "name=nginx repo" "baseurl=https://packages.nginx.org/nginx/mainline/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" > /etc/yum.repos.d/nginx.repo && printf "%s\n" "[agent]" "name=agent repo" "baseurl=https://packages.nginx.org/nginx-agent/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" >> /etc/yum.repos.d/nginx.repo && microdnf --nodocs install -y nginx-${NGINX_OSS_VERSION}* nginx-module-njs-${NGINX_OSS_VERSION}* nginx-module-otel-${NGINX_OSS_VERSION}* nginx-module-image-filter-${NGINX_OSS_VERSION}* nginx-module-xslt-${NGINX_OSS_VERSION}* nginx-agent-${NGINX_AGENT_VERSION}* && rm /etc/yum.repos.d/nginx.repo && ubi-clean.sh # buildkit

ARG BUILD_OS=ubi

ARG IC_VERSION=5.3.2

ARG TARGETPLATFORM=linux/arm64

ARG NAP_MODULES=none

ENV BUILD_OS=ubi

RUN |6 IC_VERSION=5.3.2 NGINX_OSS_VERSION=1.29.4 NGINX_AGENT_VERSION=3.6 BUILD_OS=ubi TARGETPLATFORM=linux/arm64 NAP_MODULES=none /bin/bash -o pipefail -c patch-os.sh && common.sh # buildkit

EXPOSE [443/tcp 80/tcp]

STOPSIGNAL SIGTERM

ENTRYPOINT ["/nginx-ingress"]

USER 101

LABEL org.opencontainers.image.version=5.3.2 org.opencontainers.image.documentation=https://docs.nginx.com/nginx-ingress-controller org.opencontainers.image.vendor=NGINX Inc <kubernetes@nginx.com> org.nginx.kic.image.build.target=linux/arm64 org.nginx.kic.image.build.os=ubi org.nginx.kic.image.build.nginx.version=

ARG TARGETARCH=arm64

ARG BUILD_OS=ubi

LABEL org.nginx.kic.image.build.version=goreleaser

COPY --chown=101:0 /nginx-ingress / # buildkit

USER 0

RUN |2 TARGETARCH=arm64 BUILD_OS=ubi /bin/bash -o pipefail -c [ -z "${BUILD_OS##*plus*}" ] && PLUS=-plus; cp -a /tmp/internal/configs/version1/nginx$PLUS.ingress.tmpl /tmp/internal/configs/version1/nginx$PLUS.tmpl /tmp/internal/configs/version2/nginx$PLUS.virtualserver.tmpl /tmp/internal/configs/version2/nginx$PLUS.transportserver.tmpl / && chown -R 101:0 /*.tmpl && chmod -R g=u /*.tmpl # buildkit

USER 101

ARG IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.3.2-ubi

ARG IC_VERSION=5.3.2

LABEL version=5.3.2 org.opencontainers.image.version=5.3.2

USER 0

RUN |2 IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.3.2-ubi IC_VERSION=5.3.2 /bin/bash -o pipefail -c if [ -f /etc/apk/repositories ]; then sed -i -e '/nginx.com/d' /etc/apk/repositories; fi && patch-os.sh # buildkit

USER 101