{"slug":"kubeapiserver","tag":"v1.36.6-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-kubeapiserver-v1.36.6-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"1ec07ab02ebaac40f72e089ce1750e4a462bde16f015db9e98fc8d967a155584","generated_at":"2026-10-29T19:39:35Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/kubernetes/kubernetes","ref":"v1.36.6","commit":"1b2171b110bb2a2542e1322035c6583ec86eb976","url":"https://github.com/kubernetes/kubernetes/tree/1b2171b110bb2a2542e1322035c6583ec86eb976"},"fetches":[{"kind":"git","url":"https://github.com/kubernetes/kubernetes.git","ref":"v1.36.6"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1793102572,"source_date_epoch_utc":"2026-10-27T12:02:52Z","target":{"image":"readystack/kubeapiserver:v1.36.6-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:49c4d7708668d7ab42ae0d1d3d584063f67ef87f2d746e21d6709288afdb997e","config_digest":"sha256:bda04858b63b3674f29e30e469069bcc4e3817e258c5a12f7b9f985639d8fda1"},"checksummed_files":58527},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":9625928,"sha256":"3ee645eb4f5ddf3ee7d99814c081a524a268a16fa2290247ebff34deb62acf21","public":"account","lines":58527},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":7080,"sha256":"a915c1980a00ea00f229c6398c557502cb8d4814561f857e0128f32f684cc5d4","public":"account","lines":89},{"path":"Dockerfile.offline","size":7080,"sha256":"a915c1980a00ea00f229c6398c557502cb8d4814561f857e0128f32f684cc5d4","public":"account","lines":89},{"path":"Dockerfile.offline.pinned","size":7080,"sha256":"a915c1980a00ea00f229c6398c557502cb8d4814561f857e0128f32f684cc5d4","public":"preview","lines":89,"preview":{"text":"# =====================================================================\n# kube-apiserver v1.36.6 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <context>\n# Pinned-public-base + vendored model: golang 1.26.10 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/kubeapiserver-src is kubernetes v1.36.6 fully vendored (GOPROXY=off, the workspace vendor/), vendored/debs the\n# apt closure (dpkg offline), vendored/setcap-debs libcap2-bin for the setcap stage only.\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE (upstream build/server-image/kube-apiserver/Dockerfile at v1.36.6): /usr/local/bin/kube-apiserver with\n# cap_net_bind_service, /go-runner (kube-log-runner, built from the same tree) as ENTRYPOINT. kubeadm's static Pod\n# sets `command: [kube-apiserver, ...]`, which replaces the ENTRYPOINT. Unlike upstream (distroless, root) the base is\n# Ubuntu 24.04 and the default user is kube (999:999): root comes from the Pod (securityContext.runAsUser: 0, the kubeadm\n# patch file product-kits/kubevirt-stack/install/controlplane/patches/kube-apiserver+strategic.yaml).\n# =====================================================================\n\n# --- kube-apiserver + kube-log-runner (/go-runner) ---------------------------------------------------------------------\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build\nARG SOURCE_DATE_EPOCH=1793102572\nWORKDIR /k8s\nCOPY vendored/kubeapiserver-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=-buildvcs=false GOPROXY=off\n# upstream hack/lib/golang.sh + version.sh: tags selinux,notest,grpcnotrace; -trimpath -s -w; static (CGO off);\n# gitVersion/gitCommit/gitTreeState/gitMajor/gitMinor/buildDate stamped into both version packages, buildDate from","lines_shown":24,"lines_total":89}},{"path":"Dockerfile.vendor","size":5804,"sha256":"9f28cff06382baa43f9c5701499fd2689bb75cc8403785cdc21677acc1efcbaa","public":"account","lines":71},{"path":"MANIFEST.txt","size":5646122,"sha256":"a1651fd530329f858540245c30753f92cc43a70dc95874d6edf033991064b94e","public":"account","lines":58529},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"1baf07802daf74bb53895a5dc126efadea088eaec3460ac65cf3d9b9ca460a3c","public":"full","lines":1,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1793102572\n"},{"path":"TARGET_DIGEST.txt","size":474,"sha256":"8fe76309624442c827595dd3979b7dd7d185cc95903964c15d9a707c00e455e7","public":"full","lines":11,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:49c4d7708668d7ab42ae0d1d3d584063f67ef87f2d746e21d6709288afdb997e\nconfig_digest=sha256:bda04858b63b3674f29e30e469069bcc4e3817e258c5a12f7b9f985639d8fda1\ntag=readystack/kubeapiserver:v1.36.6-CE-ubuntu24.04-r1\nprobe_port=6443\nprobe_path=/\nprobe_timeout=180\nprobe_exec=/usr/local/bin/rs-probe -k https://127.0.0.1:6443/readyz\nverify_boot=oneshot\nverify_oneshot_arg=kube-apiserver\nverify_oneshot_arg=--version\nverify_oneshot_expect=Kubernetes v1.36.6\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1726,"sha256":"b5b7953fae2bcafc03af7df5f21cc1bef9d3806787779711e13706464fc6977d","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5406,"sha256":"f4c7c000e9d095bb8b328c4c0c5e1825b3eeb93fbe758481df3e34cbfb8d25fb","public":"account","lines":59},{"path":"docs/VERIFY.md","size":1994,"sha256":"6fa24a361c3a033695678cd2e5388b9d2b241b428de89080c572f7d95b429d6e","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":79,"sha256":"0cb480d8cb34ac08e39b88a0812ad515cddaa46e70e6f1ae51e4a2db2fbe39cc","public":"full","lines":2,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for kubeapiserver (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":3240,"sha256":"ec65916e7a8cbf320ddb1f6f972d4ce67625d568f1e83ff532b89aeea74f6c76","public":"account","lines":46},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":660,"sha256":"259e2cf0ec1779a7a94419775f4bc3522c643d15dbb5140e09c6db0478cf15b9","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":262257,"sha256":"fc497a5bd19f34a0f37857f1ecbcacb21d7bbc6db7c5890d48203d16c95a9b83","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":319,"sha256":"f5116a26c188ce02d6eb60fcb22a4e8f957e544546bc55e9a73878a89dbac723","public":"full","lines":9,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"kubeapiserver\",\n  \"repo\": \"https://github.com/kubernetes/kubernetes\",\n  \"ref\": \"v1.36.6\",\n  \"commit\": \"1b2171b110bb2a2542e1322035c6583ec86eb976\",\n  \"tree_listing_sha256\": \"803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004\",\n  \"file_count\": 29206\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":23,"sha256":"0630392bbd9f11668e937cf0a980d4ae742c8b5f21b00e3da52f03a270846dd7","public":"account","lines":2},{"path":"docs/provenance/TOOLCHAIN.lock","size":6341,"sha256":"75bf3f9ae021e78cab377dd050e73a7417fbf313ba97f8f353fd889a591a6b31","public":"account","lines":132},{"path":"rebuild.json","size":1507,"sha256":"d1ac73a35850bc522558aa9e83e0424e6d09017acacd28ead957a36d5ec7f000","public":"account","lines":42},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/kubeapiserver/v1.36.6-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":29256,"bytes":250693207},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":29230,"bytes":249876304}},"links":{"page":"https://readystack.dev/products/kubeapiserver/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fkubeapiserver%2Frecipe","kit":"https://readystack.dev/buy.html?product=kubeapiserver"}}