{"slug":"kubernetes","tag":"v1.37.1-CE-ubuntu24.04-r2","current":true,"account":false,"tarball":"ReadyStack-kubernetes-v1.37.1-CE-ubuntu24.04-r2.tar.gz","tarball_sha256":"3bc000df0acdc64483a4a81fba0e0005904024f7ca833c03046ad8665e186d42","generated_at":"2026-10-29T19:40:54Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/kubernetes/kubernetes","ref":"v1.37.1","commit":"f78e722310e50bcaca9276be22276d9e91d91308","url":"https://github.com/kubernetes/kubernetes/tree/f78e722310e50bcaca9276be22276d9e91d91308"},"components":[{"repo":"https://github.com/containerd/containerd","ref":"v2.4.2","commit":"b7a25261e029d68978bbf290df0a62fc819b3c51","url":"https://github.com/containerd/containerd/tree/b7a25261e029d68978bbf290df0a62fc819b3c51"},{"repo":"https://github.com/opencontainers/runc","ref":"v1.5.2","commit":"29dd3dc2b13b4123162e5fe132504bb4b15569f1","url":"https://github.com/opencontainers/runc/tree/29dd3dc2b13b4123162e5fe132504bb4b15569f1"},{"repo":"https://github.com/containernetworking/plugins","ref":"v1.9.1","commit":"adc3e6b5b581638afbd194cf2e9319ecbb0151a1","url":"https://github.com/containernetworking/plugins/tree/adc3e6b5b581638afbd194cf2e9319ecbb0151a1"},{"repo":"https://github.com/kubernetes-sigs/cri-tools","ref":"v1.37.0","commit":"13496db06e3f6636a0855977dd86344698dfc501","url":"https://github.com/kubernetes-sigs/cri-tools/tree/13496db06e3f6636a0855977dd86344698dfc501"},{"repo":"https://github.com/etcd-io/etcd","ref":"v3.7.2","commit":"68c065e562994b89e333e77b039ad066f933c586","url":"https://github.com/etcd-io/etcd/tree/68c065e562994b89e333e77b039ad066f933c586"},{"repo":"https://github.com/coredns/coredns","ref":"v1.15.0","commit":"a6fde3fe339c6ec848447e11cc9796be8c97b4e0","url":"https://github.com/coredns/coredns/tree/a6fde3fe339c6ec848447e11cc9796be8c97b4e0"}],"fetches":[{"kind":"git","url":"https://github.com/kubernetes/kubernetes.git","ref":"v1.37.1"},{"kind":"git","url":"https://github.com/containerd/containerd.git","ref":"v2.4.2"},{"kind":"git","url":"https://github.com/opencontainers/runc.git","ref":"v1.5.2"},{"kind":"git","url":"https://github.com/containernetworking/plugins.git","ref":"v1.9.1"},{"kind":"git","url":"https://github.com/kubernetes-sigs/cri-tools.git","ref":"v1.37.0"},{"kind":"git","url":"https://github.com/etcd-io/etcd.git","ref":"v3.7.2"},{"kind":"git","url":"https://github.com/coredns/coredns.git","ref":"v1.15.0"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1790183182,"source_date_epoch_utc":"2026-09-23T17:06:22Z","target":{"image":"readystack/kubernetes:v1.37.1-CE-ubuntu24.04-r2","image_manifest_digest":"sha256:fd30476fb8e96b42deaaafcb7ba25e0437b57c83ceeac7c6ae42572559ca20e7","config_digest":"sha256:5e10dc285aac70e4edc7e61b0a6806dec85a18141c356bf6c019acbd1b5a0394"},"checksummed_files":92986},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":14615308,"sha256":"309a9ca121c70c5490845d34f76eb26481404304b8551a800251b2c5bd7ad8bf","public":"account","lines":92986},{"path":"Corefile","size":622,"sha256":"3a5d7b8a106f7d1be4533de32ca4901c770cc2d08f93086db0a00224389aa270","public":"account","lines":22},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":13674,"sha256":"2359441af8eb8a2175bf8ae13c3ab908152f8f823dadeb9894b6c781c2f285e6","public":"account","lines":177},{"path":"Dockerfile.offline","size":13674,"sha256":"2359441af8eb8a2175bf8ae13c3ab908152f8f823dadeb9894b6c781c2f285e6","public":"account","lines":177},{"path":"Dockerfile.offline.pinned","size":13674,"sha256":"2359441af8eb8a2175bf8ae13c3ab908152f8f823dadeb9894b6c781c2f285e6","public":"preview","lines":177,"preview":{"text":"# =====================================================================\n# Kubernetes v1.37.1 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <git-context>\n# Pinned-public-base + vendored model: golang 1.26.10 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/*-src are fully vendored Go trees (GOPROXY=off, vendor/), every binary compiled here on the one pinned Go;\n# vendored/debs is the apt closure, vendored/seccomp-debs Debian's libseccomp-dev for runc, both dpkg offline.\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE: one container, two ways to run it (kube-entrypoint.sh):\n#   default (USER 999 kube, no extra privileges): the control plane — etcd, kube-apiserver, kube-controller-manager,\n#     kube-scheduler. A Kubernetes API with no node.\n#   --privileged --user 0: a single-node cluster — the same control plane, still run as kube, plus containerd,\n#     kubelet and kube-proxy as root, CoreDNS and a ptp CNI network, so Pods run inside this container.\n# =====================================================================\n\n# --- kubernetes: the seven binaries, plus the pause container image built from upstream's pause.c ---------------------\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS kubernetes-build\nARG SOURCE_DATE_EPOCH=1790183182\nWORKDIR /k8s\nCOPY vendored/kubernetes-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=-buildvcs=false GOPROXY=off\n# upstream hack/lib/golang.sh + version.sh: tags selinux,notest,grpcnotrace; -trimpath -s -w; gitVersion/gitCommit/\n# gitTreeState/gitMajor/gitMinor/buildDate stamped into both version packages; buildDate from SOURCE_DATE_EPOCH (the tag","lines_shown":24,"lines_total":177}},{"path":"Dockerfile.vendor","size":12884,"sha256":"171088823fc258ee9dfefc7d37c1e1b5f8c123baf17de2b9b5fa7fd82f4d8b8d","public":"account","lines":166},{"path":"MANIFEST.txt","size":8292290,"sha256":"b912ca5e0ce2043e694784e601dade473f3f43442e37ee233a0bdfb805554239","public":"account","lines":92988},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"9acb43a80a2e40e2c2b6d980319a40617a4328617589e3a2f9ca551786f65438","public":"full","lines":1,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/SOURCE_DATE_EPOCH.txt","text":"1790183182\n"},{"path":"TARGET_DIGEST.txt","size":329,"sha256":"b81b290e007ca4c97a3d2a0cb76a2342e024f5db4e5ecae29f13abfb03140d90","public":"full","lines":7,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:fd30476fb8e96b42deaaafcb7ba25e0437b57c83ceeac7c6ae42572559ca20e7\nconfig_digest=sha256:5e10dc285aac70e4edc7e61b0a6806dec85a18141c356bf6c019acbd1b5a0394\ntag=readystack/kubernetes:v1.37.1-CE-ubuntu24.04-r2\nprobe_port=6443\nprobe_path=/\nprobe_timeout=300\nprobe_exec=curl -fsk https://127.0.0.1:6443/livez\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"cluster-dns.yaml","size":1441,"sha256":"6ad614434fe0451a51676687112aed3beb8285f225ec7b7475cad54309517f41","public":"account","lines":66},{"path":"cluster-rbac.yaml","size":943,"sha256":"e1a3c30508c767bb54b9de8c6461165221502ee2410900103bae14bee321e249","public":"account","lines":28},{"path":"cni.conflist","size":423,"sha256":"02918797d3cd3021a37b31853d407c6e46123c578f3a7e0feb3546015c8dd5df","public":"account","lines":21},{"path":"containerd-config.toml","size":1240,"sha256":"bb00a26b4727946bab9c7f6edf639081fb409af72cfefb730fe73a396ce9003f","public":"account","lines":27},{"path":"crictl.yaml","size":124,"sha256":"ad526395cca4db1e3ea166ddabbba23707829b104215d122f05f8e582cef9050","public":"account","lines":3},{"path":"docs/PROVENANCE.md","size":1716,"sha256":"23ad320fa1e051d7c4a6c9cd4801ee84990d1c6d3389fd1ffe913b72f444bb9d","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5126,"sha256":"bbdf3c2c20f8d8b5bc12d865ca87aa0e365b26708dab9385551aa8bbdaa86220","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1974,"sha256":"7082b2c43924e0900a47db5bf8c7e1237facb5a809690b38b26cef6733b60a35","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":76,"sha256":"dbc51fdf03670e97af08bc716b67bbbf2a4d9250e74752867337768f77834ab1","public":"full","lines":2,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for kubernetes (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":7932,"sha256":"1e555fe5ef50950ef29917b1b9e3e601997023ad4a0839d6b878d02e1ec67b21","public":"account","lines":130},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":657,"sha256":"c35b9a836b38883f1406b74d856a4e338d1e29d3c6ea5b525307e0c3129e0870","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":262600,"sha256":"7da9fd758f8fb552645cad5d0a6d0dba192cd53bb63f177bad1b8fcef300d1f3","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":316,"sha256":"b74198f715a1b61ac67baedaad3f5795e426657ff21bfb93669bb8c16c7d5ecd","public":"full","lines":9,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"kubernetes\",\n  \"repo\": \"https://github.com/kubernetes/kubernetes\",\n  \"ref\": \"v1.37.1\",\n  \"commit\": \"f78e722310e50bcaca9276be22276d9e91d91308\",\n  \"tree_listing_sha256\": \"9b6ed1d7a503ebb54aa8e5bd0e2266e698c640f4a2dd445039391337d052a0ed\",\n  \"file_count\": 31262\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":87,"sha256":"eb3022ff0e9743252c3c5b7554ea6dff2b62dd39551e14364f6771bee01cfb6d","public":"account","lines":9},{"path":"docs/provenance/TOOLCHAIN.lock","size":10362,"sha256":"e3968b341d43076c8ee4bfc223efebc8d42c98ed1b9dbab8ba918d22be18cf00","public":"account","lines":202},{"path":"kube-entrypoint.sh","size":12876,"sha256":"27eaac9e19a66377c156d4696dd1675e18236b9e7f8066da24fb393368e68dad","public":"account","lines":220},{"path":"kube-proxy.yaml","size":601,"sha256":"4278a49049b9a9d2b900d820581ebfc10941e8b06d848294c71a9d7b3e0738fe","public":"account","lines":16},{"path":"kube-svc","size":6847,"sha256":"95a9a9535bdf6f00bde556f6d562594d12e544c77cd1ae4ebbdca438341cbb01","public":"account","lines":101},{"path":"kubelet.yaml","size":1153,"sha256":"1bdfcc80a6ed16c36e31b570d58da7c041a85af68a2cf781a509163ae81b1c4b","public":"account","lines":35},{"path":"mk-pause-oci.sh","size":2012,"sha256":"3418ca726981c66d8150628bda265b50bb734ed02f27109dd992c92edcafd33d","public":"account","lines":22},{"path":"rebuild.json","size":1466,"sha256":"b9e33587f7c75cb66316265813a9aa9c06ba54a3e59890680949171f6361deda","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/kubernetes/v1.37.1-CE-ubuntu24.04-r2/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":31322,"bytes":271555474},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":61614,"bytes":581617950}},"links":{"page":"https://readystack.dev/products/kubernetes/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fkubernetes%2Frecipe","kit":"https://readystack.dev/buy.html?product=kubernetes"}}