FROM docker.io/debian:trixie-20250929-slim
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates \
        curl \
        gettext-base \
        git \
        openssh-client \
        yq \
    && rm -rf /var/lib/apt/lists/*
# https://dl.k8s.io/release/stable.txt
RUN curl -sLo /usr/local/bin/kubectl \
        "https://dl.k8s.io/release/v1.34.1/bin/linux/amd64/kubectl" \
    && chmod 0755 /usr/local/bin/kubectl
RUN useradd -m app
USER app