Dockerfile

FROM alpine:3.19 as build

RUN apk add --update --no-cache ca-certificates git

ENV VERSION=v3.14.4
ENV FILENAME=helm-${VERSION}-linux-amd64.tar.gz
ENV SHA256SUM=a5844ef2c38ef6ddf3b5a8f7d91e7e0e8ebc39a38bb3fc8013d629c1ef29c259

WORKDIR /

RUN apk add --update -t deps curl tar gzip
RUN curl -L https://get.helm.sh/${FILENAME} > ${FILENAME} && \
    echo "${SHA256SUM}  ${FILENAME}" > helm_${VERSION}_SHA256SUMS && \
    sha256sum -cs helm_${VERSION}_SHA256SUMS && \
    tar zxv -C /tmp -f ${FILENAME} && \
    rm -f ${FILENAME}


# The image we keep
FROM alpine:3.19
LABEL maintainer="mario.siegenthaler@linkyard.ch"

COPY --from=build /tmp/linux-amd64/helm /bin/helm

RUN apk --no-cache add bash
RUN apk add --update --no-cache bash git ca-certificates jq curl wget

ENV SPRUCE_VERSION v1.31.0
RUN wget https://github.com/geofffranks/spruce/releases/download/${SPRUCE_VERSION}/spruce-linux-amd64 \
  && chmod a+x spruce-linux-amd64 \
  && mv spruce-linux-amd64 /usr/local/bin/spruce

RUN mkdir -p ~/.local/share/helm/plugins
ENV HELM_SECRETS_VERSION v4.6.0
RUN curl -LsSf https://github.com/jkroepke/helm-secrets/releases/download/${HELM_SECRETS_VERSION}/helm-secrets.tar.gz | tar -C "$(helm env HELM_PLUGINS)" -xzf-

ENTRYPOINT ["/bin/helm"]