FROM debian:12-slim
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates \
        curl \
        gettext-base \
        git \
        jq \
        openssh-client \
    && rm -rf /var/lib/apt/lists/*
RUN V="$(curl -sSL https://dl.k8s.io/release/stable.txt)" \
    && curl -sSLo /usr/local/bin/kubectl \
        "https://dl.k8s.io/release/$V/bin/linux/amd64/kubectl" \
    && chmod 0755 /usr/local/bin/kubectl
RUN useradd -m app
USER app