/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:7899936d8a255ef23a03d65107dd50f0ce4a76df58676bb1ea68c1d8f5eabde0 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:b64f911bc23faf159ec29ad1e64fddab46c614bc74ee27e80c6fc4beab268d18 in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:b64f911bc23faf159ec29ad1e64fddab46c614bc74ee27e80c6fc4beab268d18 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="21849199b7179dc3074812b8e24698ec609d6a5c" "org.opencontainers.image.revision"="21849199b7179dc3074812b8e24698ec609d6a5c" "build-date"="2026-02-05T04:59:37Z" "org.opencontainers.image.created"="2026-02-05T04:59:37Z" "release"="1770267347"org.opencontainers.image.revision=21849199b7179dc3074812b8e24698ec609d6a5c,org.opencontainers.image.created=2026-02-05T04:59:37Z

ARG IC_VERSION=5.3.4

ARG NGINX_OSS_VERSION=1.29.5

ARG NGINX_AGENT_VERSION=3.7

LABEL name=NGINX Ingress Controller maintainer=kubernetes@nginx.com vendor=NGINX Inc version=5.3.4 release=1 summary=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. description=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.k8s.description=NGINX Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.openshift.tags=nginx,ingress-controller,ingress,controller,kubernetes,openshift

COPY --chown=101:0 LICENSE /licenses/ # buildkit

SHELL [/bin/bash -o pipefail -c]

RUN |3 IC_VERSION=5.3.4 NGINX_OSS_VERSION=1.29.5 NGINX_AGENT_VERSION=3.7 /bin/bash -o pipefail -c ubi-setup.sh && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-installed && microdnf --nodocs --setopt=install_weak_deps=0 install -y diffutils dnf && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-new && dnf install -y /ubi-bin/*.rpm && dnf -q repoquery --resolve --requires --recursive --whatrequires nginx --queryformat "%{NAME}" > pkgs-nginx && dnf --setopt=protected_packages= remove -y $(comm -13 pkgs-installed pkgs-new | comm -13 pkgs-nginx -) && rm pkgs-installed pkgs-new pkgs-nginx && printf "%s\n" "[nginx]" "name=nginx repo" "baseurl=https://packages.nginx.org/nginx/mainline/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" > /etc/yum.repos.d/nginx.repo && printf "%s\n" "[agent]" "name=agent repo" "baseurl=https://packages.nginx.org/nginx-agent/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" >> /etc/yum.repos.d/nginx.repo && microdnf --nodocs install -y nginx-${NGINX_OSS_VERSION}* nginx-module-njs-${NGINX_OSS_VERSION}* nginx-module-otel-${NGINX_OSS_VERSION}* nginx-module-image-filter-${NGINX_OSS_VERSION}* nginx-module-xslt-${NGINX_OSS_VERSION}* nginx-agent-${NGINX_AGENT_VERSION}* && rm /etc/yum.repos.d/nginx.repo && ubi-clean.sh # buildkit

ARG BUILD_OS=ubi

ARG IC_VERSION=5.3.4

ARG TARGETPLATFORM=linux/arm64

ARG NAP_MODULES=none

ENV BUILD_OS=ubi

RUN |6 IC_VERSION=5.3.4 NGINX_OSS_VERSION=1.29.5 NGINX_AGENT_VERSION=3.7 BUILD_OS=ubi TARGETPLATFORM=linux/arm64 NAP_MODULES=none /bin/bash -o pipefail -c patch-os.sh && common.sh # buildkit

EXPOSE [443/tcp 80/tcp]

STOPSIGNAL SIGTERM

ENTRYPOINT ["/nginx-ingress"]

USER 101

LABEL org.opencontainers.image.version=5.3.4 org.opencontainers.image.documentation=https://docs.nginx.com/nginx-ingress-controller org.opencontainers.image.vendor=NGINX Inc <kubernetes@nginx.com> org.nginx.kic.image.build.target=linux/arm64 org.nginx.kic.image.build.os=ubi org.nginx.kic.image.build.nginx.version=

ARG TARGETARCH=arm64

ARG BUILD_OS=ubi

LABEL org.nginx.kic.image.build.version=goreleaser

COPY --chown=101:0 /nginx-ingress / # buildkit

USER 0

RUN |2 TARGETARCH=arm64 BUILD_OS=ubi /bin/bash -o pipefail -c [ -z "${BUILD_OS##*plus*}" ] && PLUS=-plus; cp -a /tmp/internal/configs/version1/nginx$PLUS.ingress.tmpl /tmp/internal/configs/version1/nginx$PLUS.tmpl /tmp/internal/configs/version2/nginx$PLUS.virtualserver.tmpl /tmp/internal/configs/version2/nginx$PLUS.transportserver.tmpl / && chown -R 101:0 /*.tmpl && chmod -R g=u /*.tmpl # buildkit

USER 101

ARG IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.3.4-ubi

ARG IC_VERSION=5.3.4

LABEL version=5.3.4 org.opencontainers.image.version=5.3.4

USER 0

RUN |2 IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.3.4-ubi IC_VERSION=5.3.4 /bin/bash -o pipefail -c if [ -f /etc/apk/repositories ]; then sed -i -e '/nginx.com/d' /etc/apk/repositories; fi && patch-os.sh # buildkit

USER 101