Dockerfile
# Semaphore UI con kubectl (los playbooks hacen drain/uncordon). Todo fijado por huella.
FROM semaphoreui/semaphore:v2.19.16@sha256:3707a971a57fdc5ac99a184bf83f2efb7d00cbeec8fb08a16a8028f77229e141
ARG KUBECTL_VERSION=v1.34.12
ARG KUBECTL_SHA256=90b7b9058ffeb5c10710bb1c73f541eaf426fb1b4e87df435db669de9a2564a2
USER root
RUN wget -qO /usr/local/bin/kubectl "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
&& echo "${KUBECTL_SHA256} /usr/local/bin/kubectl" | sha256sum -c - \
&& chmod 755 /usr/local/bin/kubectl
USER 1001