{"slug":"kubeproxy","tag":"v1.36.6-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-kubeproxy-v1.36.6-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"9825459fb7606d37f21a9e48a575f7afa3a0a508af6377c8d1c2c3ac04b87a65","generated_at":"2026-10-29T19:40:22Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/kubernetes/kubernetes","ref":"v1.36.6","commit":"1b2171b110bb2a2542e1322035c6583ec86eb976","url":"https://github.com/kubernetes/kubernetes/tree/1b2171b110bb2a2542e1322035c6583ec86eb976"},"components":[{"repo":"https://github.com/kubernetes-sigs/iptables-wrappers","ref":"v2","commit":"e139a115350974aac8a82ec4b815d2845f86997e","url":"https://github.com/kubernetes-sigs/iptables-wrappers/tree/e139a115350974aac8a82ec4b815d2845f86997e"}],"fetches":[{"kind":"git","url":"https://github.com/kubernetes/kubernetes.git","ref":"v1.36.6"},{"kind":"http","url":"https://raw.githubusercontent.com/kubernetes-sigs/iptables-wrappers/e139a115350974aac8a82ec4b815d2845f86997e/iptables-wrapper-installer.sh"},{"kind":"http","url":"https://raw.githubusercontent.com/kubernetes-sigs/iptables-wrappers/e139a115350974aac8a82ec4b815d2845f86997e/LICENSE"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1793102572,"source_date_epoch_utc":"2026-10-27T12:02:52Z","target":{"image":"readystack/kubeproxy:v1.36.6-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:690fd8d24cd4ffbf70dbe1ba26ac48ce80a972d7183cf691948ff5ff8ca8d56c","config_digest":"sha256:1bf0dce8746c88d2ef18a5ea6fd77c4d40442504347dd2a9cd6ccc2ce64349c1"},"checksummed_files":58547},"files":[{"path":"BASES.tsv","size":264,"sha256":"98233a2e2970f9c85252887b94bd7ed3933410509ec56d9007b0b25aea7aaa66","public":"full","lines":2,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852\tbases/ubuntu_24.04_fe81560990fa.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":9511368,"sha256":"73b7a3327380f95a736be595c4a1ed1fb40cccd439c2ac2ac0749027966106ab","public":"account","lines":58547},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":8289,"sha256":"0291c528780dff603d65911f8d05d029acb5293df374a95a152b2685f4a37f10","public":"account","lines":98},{"path":"Dockerfile.offline","size":8289,"sha256":"0291c528780dff603d65911f8d05d029acb5293df374a95a152b2685f4a37f10","public":"account","lines":98},{"path":"Dockerfile.offline.pinned","size":8289,"sha256":"0291c528780dff603d65911f8d05d029acb5293df374a95a152b2685f4a37f10","public":"preview","lines":98,"preview":{"text":"# =====================================================================\n# kube-proxy v1.36.6 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <context>\n# Pinned-public-base + vendored model: golang 1.26.10 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/kubeproxy-src is kubernetes v1.36.6 fully vendored (GOPROXY=off, the workspace vendor/), vendored/debs the\n# apt closure (dpkg offline), vendored/iptables-wrappers the iptables-wrappers v2 installer (sha256-checked).\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE (upstream build/server-image/Dockerfile at v1.36.6 on its kube-proxy base, distroless-iptables v0.9.9):\n# /usr/local/bin/kube-proxy, /go-runner (kube-log-runner, built from the same tree) as ENTRYPOINT, and the base's\n# userland from Ubuntu 24.04 packages: iptables and ip6tables in legacy and nft modes behind iptables-wrappers' mode\n# selection (the first call of iptables/ip6tables[-save|-restore] picks legacy or nft from the rules the node's kubelet\n# already wrote, as upstream's base does), ipset, kmod, nft (with JSON), conntrack. kubeadm's DaemonSet sets\n# `command: [/usr/local/bin/kube-proxy, ...]`, which replaces the ENTRYPOINT. Unlike upstream (root) the default user\n# is kube (999:999): kube-proxy needs root and the host network; both come from the Pod (our DaemonSet,\n# product-kits/kubevirt-stack/install/controlplane/kube-proxy.yaml: privileged, runAsUser: 0).\n# =====================================================================\n\n# --- kube-proxy + kube-log-runner (/go-runner) ------------------------------------------------------------------------\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build\nARG SOURCE_DATE_EPOCH=1793102572\nWORKDIR /k8s\nCOPY vendored/kubeproxy-src/ .","lines_shown":24,"lines_total":98}},{"path":"Dockerfile.vendor","size":7013,"sha256":"2c7387afc0127218b9e695fc061ac14bf26a1ca1be0a5559a1049136b8adde40","public":"account","lines":82},{"path":"MANIFEST.txt","size":5530202,"sha256":"d4d30477e898a8910faf2e43f46f5323c7533034d4c66c793e779ef7c091ca09","public":"account","lines":58549},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"1baf07802daf74bb53895a5dc126efadea088eaec3460ac65cf3d9b9ca460a3c","public":"full","lines":1,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1793102572\n"},{"path":"TARGET_DIGEST.txt","size":465,"sha256":"1c1949cb9859ea5827aa70aa5cd276c482ae1c4141985dfbad2af12df0eea2da","public":"full","lines":11,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:690fd8d24cd4ffbf70dbe1ba26ac48ce80a972d7183cf691948ff5ff8ca8d56c\nconfig_digest=sha256:1bf0dce8746c88d2ef18a5ea6fd77c4d40442504347dd2a9cd6ccc2ce64349c1\ntag=readystack/kubeproxy:v1.36.6-CE-ubuntu24.04-r1\nprobe_port=10256\nprobe_path=/\nprobe_timeout=180\nprobe_exec=/usr/local/bin/rs-probe http://127.0.0.1:10256/healthz\nverify_boot=oneshot\nverify_oneshot_arg=kube-proxy\nverify_oneshot_arg=--version\nverify_oneshot_expect=Kubernetes v1.36.6\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1714,"sha256":"b1c03f34c8272772a23112eed444f813fe47c2b1044e42fe942e84c79956c2f0","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5374,"sha256":"be9806de5ac31e23e5958ac20d6bc344cfd391ec47289da7a7d45d92413f3844","public":"account","lines":59},{"path":"docs/VERIFY.md","size":1974,"sha256":"99deae17dd4e7f5a4949d83c553b4a4e2ee5075fb008f2106823425e8949308b","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":75,"sha256":"692531f8d51d8a119f77692560421ab1623b51fcb364d938e54cf522ea4c3148","public":"full","lines":2,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for kubeproxy (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":4141,"sha256":"e9583c403096b88548c8f98514e5c29d0bc8c57f3e5a0244461473f3d35fc11a","public":"account","lines":62},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":656,"sha256":"3ea1769fc1c019094264ed97067a148917e1d5f0066f6fd142387e9dec6ee081","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":262253,"sha256":"9d1af0fe53cdb3a8fdeb5ab27bb15709ee9991843882da3732b083cbc9db6943","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":315,"sha256":"c3b1bfe485942e31f81c636f4286ac8623ac689ba6bd9f60ef32d8556c9303b3","public":"full","lines":9,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"kubeproxy\",\n  \"repo\": \"https://github.com/kubernetes/kubernetes\",\n  \"ref\": \"v1.36.6\",\n  \"commit\": \"1b2171b110bb2a2542e1322035c6583ec86eb976\",\n  \"tree_listing_sha256\": \"803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004\",\n  \"file_count\": 29206\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":62,"sha256":"f92416ae24fc299ed4df9001657fe95308de476ae6792b3ca85d91bb09ac35bd","public":"account","lines":7},{"path":"docs/provenance/TOOLCHAIN.lock","size":6846,"sha256":"e01a88efea96bbf221481f827a3abd44c55d6e05fe064dd17f99dc7206be24fd","public":"account","lines":147},{"path":"rebuild.json","size":1499,"sha256":"39dce415b8a88ecfe22abad5b3ef5e334d09944bce26feb71a2c1378f2d32bc6","public":"account","lines":42},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/kubeproxy/v1.36.6-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":29256,"bytes":250820346},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":29250,"bytes":251362347}},"links":{"page":"https://readystack.dev/products/kubeproxy/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fkubeproxy%2Frecipe","kit":"https://readystack.dev/buy.html?product=kubeproxy"}}