/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:ebed5b428b4d7b7bd491e92b7639c4e00e22e8a9993f0cbde996cf63a3263224 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:819fd782db190e306ad6dedf6720029cee5c6639348ef8be1d7fa1456c09e46b in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:819fd782db190e306ad6dedf6720029cee5c6639348ef8be1d7fa1456c09e46b in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="d0c250a501ab44b94ebea3e751fcaa45749a08a2" "org.opencontainers.image.revision"="d0c250a501ab44b94ebea3e751fcaa45749a08a2" "build-date"="2026-03-19T17:04:41Z" "org.opencontainers.image.created"="2026-03-19T17:04:41Z" "release"="1773939694"org.opencontainers.image.revision=d0c250a501ab44b94ebea3e751fcaa45749a08a2,org.opencontainers.image.created=2026-03-19T17:04:41Z

ARG IC_VERSION=5.4.1

ARG NGINX_OSS_VERSION=1.29.7

ARG NGINX_AGENT_VERSION=3.8

LABEL name=NGINX Ingress Controller maintainer=kubernetes@nginx.com vendor=NGINX Inc version=5.4.1 release=1 summary=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. description=The Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.k8s.description=NGINX Ingress Controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources. io.openshift.tags=nginx,ingress-controller,ingress,controller,kubernetes,openshift

COPY --chown=101:0 LICENSE /licenses/ # buildkit

SHELL [/bin/bash -o pipefail -c]

RUN |3 IC_VERSION=5.4.1 NGINX_OSS_VERSION=1.29.7 NGINX_AGENT_VERSION=3.8 /bin/bash -o pipefail -c ubi-setup.sh && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-installed && microdnf --nodocs --setopt=install_weak_deps=0 install -y diffutils dnf && rpm -qa --queryformat "%{NAME}\n" | sort > pkgs-new && dnf install -y /ubi-bin/*.rpm && dnf -q repoquery --resolve --requires --recursive --whatrequires nginx --queryformat "%{NAME}" > pkgs-nginx && dnf --setopt=protected_packages= remove -y $(comm -13 pkgs-installed pkgs-new | comm -13 pkgs-nginx -) && rm pkgs-installed pkgs-new pkgs-nginx && printf "%s\n" "[nginx]" "name=nginx repo" "baseurl=https://packages.nginx.org/nginx/mainline/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" > /etc/yum.repos.d/nginx.repo && printf "%s\n" "[agent]" "name=agent repo" "baseurl=https://packages.nginx.org/nginx-agent/centos/9/\$basearch/" "gpgcheck=1" "enabled=1" "module_hotfixes=true" >> /etc/yum.repos.d/nginx.repo && microdnf --nodocs install -y nginx-${NGINX_OSS_VERSION}* nginx-module-njs-${NGINX_OSS_VERSION}* nginx-module-otel-${NGINX_OSS_VERSION}* nginx-module-image-filter-${NGINX_OSS_VERSION}* nginx-module-xslt-${NGINX_OSS_VERSION}* nginx-agent-${NGINX_AGENT_VERSION}* && rm /etc/yum.repos.d/nginx.repo && ubi-clean.sh # buildkit

ARG BUILD_OS=ubi

ARG IC_VERSION=5.4.1

ARG NGINX_VERSION

ARG TARGETPLATFORM=linux/arm64

ARG NAP_MODULES=none

ENV BUILD_OS=ubi

RUN |7 IC_VERSION=5.4.1 NGINX_OSS_VERSION=1.29.7 NGINX_AGENT_VERSION=3.8 BUILD_OS=ubi NGINX_VERSION= TARGETPLATFORM=linux/arm64 NAP_MODULES=none /bin/bash -o pipefail -c patch-os.sh && common.sh # buildkit

EXPOSE [443/tcp 80/tcp]

STOPSIGNAL SIGTERM

ENTRYPOINT ["/nginx-ingress"]

USER 101

LABEL org.opencontainers.image.version=5.4.1 org.opencontainers.image.documentation=https://docs.nginx.com/nginx-ingress-controller org.opencontainers.image.vendor=NGINX Inc <kubernetes@nginx.com> org.nginx.kic.image.build.target=linux/arm64 org.nginx.kic.image.build.os=ubi org.nginx.kic.image.build.nginx.version=

ARG TARGETARCH=arm64

ARG BUILD_OS=ubi

LABEL org.nginx.kic.image.build.version=goreleaser

COPY --chown=101:0 /nginx-ingress / # buildkit

USER 0

RUN |2 TARGETARCH=arm64 BUILD_OS=ubi /bin/bash -o pipefail -c [ -z "${BUILD_OS##*plus*}" ] && PLUS=-plus; cp -a /tmp/internal/configs/version1/nginx$PLUS.ingress.tmpl /tmp/internal/configs/version1/nginx$PLUS.tmpl /tmp/internal/configs/version2/nginx$PLUS.virtualserver.tmpl /tmp/internal/configs/version2/nginx$PLUS.transportserver.tmpl / && chown -R 101:0 /*.tmpl && chmod -R g=u /*.tmpl # buildkit

USER 101

ARG IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.4.1-ubi

ARG IC_VERSION=5.4.1

LABEL version=5.4.1 org.opencontainers.image.version=5.4.1

USER 0

RUN |2 IMAGE_NAME=gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/release/nginx-ic/nginx-ingress:5.4.1-ubi IC_VERSION=5.4.1 /bin/bash -o pipefail -c if [ -f /etc/apk/repositories ]; then sed -i -e '/nginx.com/d' /etc/apk/repositories; fi && patch-os.sh # buildkit

USER 101