{"slug":"kubecontrollermanager","tag":"v1.36.6-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"6f9300aae694c1477c8244e70935e621a006572418e9fb46af671ddaa5cd27c3","generated_at":"2026-10-29T19:39:58Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/kubernetes/kubernetes","ref":"v1.36.6","commit":"1b2171b110bb2a2542e1322035c6583ec86eb976","url":"https://github.com/kubernetes/kubernetes/tree/1b2171b110bb2a2542e1322035c6583ec86eb976"},"fetches":[{"kind":"git","url":"https://github.com/kubernetes/kubernetes.git","ref":"v1.36.6"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1793102572,"source_date_epoch_utc":"2026-10-27T12:02:52Z","target":{"image":"readystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:f832d6d6174e904cb86f178379571f02421cd5e056f112da12062aec8d2f93a2","config_digest":"sha256:da510ff550ae03804b56efcc1d44963104668162f698d518b0091ac0d5c0f91b"},"checksummed_files":58526},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":9859605,"sha256":"81252b955aae51875f67498777f7901691c587632265b873b55c917419e8a705","public":"account","lines":58526},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":6612,"sha256":"4f4ab02048edf088d1043d49a3e94916505972068befe8b1fa72636bf827e606","public":"account","lines":82},{"path":"Dockerfile.offline","size":6612,"sha256":"4f4ab02048edf088d1043d49a3e94916505972068befe8b1fa72636bf827e606","public":"account","lines":82},{"path":"Dockerfile.offline.pinned","size":6612,"sha256":"4f4ab02048edf088d1043d49a3e94916505972068befe8b1fa72636bf827e606","public":"preview","lines":82,"preview":{"text":"# =====================================================================\n# kube-controller-manager v1.36.6 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <context>\n# Pinned-public-base + vendored model: golang 1.26.10 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/kubecontrollermanager-src is kubernetes v1.36.6 fully vendored (GOPROXY=off, the workspace vendor/),\n# vendored/debs the apt closure (dpkg offline).\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE (upstream build/server-image/Dockerfile at v1.36.6): /usr/local/bin/kube-controller-manager, /go-runner (kube-log-runner,\n# built from the same tree) as ENTRYPOINT. kubeadm's static Pod sets `command: [kube-controller-manager, ...]`, which\n# replaces the ENTRYPOINT. Unlike upstream (distroless, root) the base is Ubuntu 24.04 and the default user is kube\n# (999:999): root comes from the Pod (securityContext.runAsUser: 0, the kubeadm patch file\n# product-kits/kubevirt-stack/install/controlplane/patches/kube-controller-manager+strategic.yaml).\n# =====================================================================\n\n# --- kube-controller-manager + kube-log-runner (/go-runner) -----------------------------------------------------------\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build\nARG SOURCE_DATE_EPOCH=1793102572\nWORKDIR /k8s\nCOPY vendored/kubecontrollermanager-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=-buildvcs=false GOPROXY=off\n# upstream hack/lib/golang.sh + version.sh: tags selinux,notest,grpcnotrace; -trimpath -s -w; static (CGO off);\n# gitVersion/gitCommit/gitTreeState/gitMajor/gitMinor/buildDate stamped into both version packages, buildDate from","lines_shown":24,"lines_total":82}},{"path":"Dockerfile.vendor","size":5323,"sha256":"94de9793157dbecdf49292f5a803065caa6335d5cbe857dc54644613a466d614","public":"account","lines":64},{"path":"MANIFEST.txt","size":5879867,"sha256":"39bcf438636bd034bdc0dc5d04a70b85086bd12c415af5dc12b39a555576bdb0","public":"account","lines":58528},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"1baf07802daf74bb53895a5dc126efadea088eaec3460ac65cf3d9b9ca460a3c","public":"full","lines":1,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1793102572\n"},{"path":"TARGET_DIGEST.txt","size":494,"sha256":"623d3a1788f6d08f2cc72be498086c2f6f06eaa15da41886e2efdd2d943191ba","public":"full","lines":11,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:f832d6d6174e904cb86f178379571f02421cd5e056f112da12062aec8d2f93a2\nconfig_digest=sha256:da510ff550ae03804b56efcc1d44963104668162f698d518b0091ac0d5c0f91b\ntag=readystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r1\nprobe_port=10257\nprobe_path=/\nprobe_timeout=180\nprobe_exec=/usr/local/bin/rs-probe -k https://127.0.0.1:10257/healthz\nverify_boot=oneshot\nverify_oneshot_arg=kube-controller-manager\nverify_oneshot_arg=--version\nverify_oneshot_expect=Kubernetes v1.36.6\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1751,"sha256":"af30502b4b2c8d81a78b4defdfc6b90f80ef72889dba97227733b40aadd4381e","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5472,"sha256":"e8dc14fd6fd66de3848933687747ad22d66069d31db6212b42ac896559d0fd84","public":"account","lines":59},{"path":"docs/VERIFY.md","size":2035,"sha256":"85ebd9cb8a2d5d53a547c6c54a72676e6d60152cd2bee06a25e163b91e740d16","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":87,"sha256":"c289e1db47044a5466904bec593faf88f41229b46c0a6dbd74cbae2f022352af","public":"full","lines":2,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for kubecontrollermanager (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":3283,"sha256":"3084801c7ec1d63b97b21cee39be8c1f626f154d4fdb26669416be9b30ae0cb1","public":"account","lines":46},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":668,"sha256":"45d9064ae7a2f0e0b461a7a630546dcbac112fcd8f0d987151d6c450c67ede29","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":262265,"sha256":"b4e6f454c420488dae11a9b2679efc43e693b74acd3c9fa3f78e611719b07ae8","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":327,"sha256":"6e4d6eb3dbc8596c8e4e93009eac44c922cd195ae1a1ec1bca98cd55e3954029","public":"full","lines":9,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"kubecontrollermanager\",\n  \"repo\": \"https://github.com/kubernetes/kubernetes\",\n  \"ref\": \"v1.36.6\",\n  \"commit\": \"1b2171b110bb2a2542e1322035c6583ec86eb976\",\n  \"tree_listing_sha256\": \"803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004\",\n  \"file_count\": 29206\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":23,"sha256":"0630392bbd9f11668e937cf0a980d4ae742c8b5f21b00e3da52f03a270846dd7","public":"account","lines":2},{"path":"docs/provenance/TOOLCHAIN.lock","size":6376,"sha256":"4d8791e951976f756bbfc56ff9ccf9d1e68fd8b3001995315350b6820a7991e2","public":"account","lines":132},{"path":"rebuild.json","size":1524,"sha256":"17b20c808d61593050a25a505246f94c213510d6d9a93f762221ed72052deedf","public":"account","lines":42},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":29256,"bytes":250684361},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":29229,"bytes":249842170}},"links":{"page":"https://readystack.dev/products/kubecontrollermanager/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fkubecontrollermanager%2Frecipe","kit":"https://readystack.dev/buy.html?product=kubecontrollermanager"}}