anchor.diff:  	io.openshift.tags="nginx,ingress-controller,ingress,controller,kubernetes,openshift"
   
   RUN set -x \
  +	&& microdnf --nodocs --enablerepo=ubi-8-baseos install -y shadow-utils \
   	&& groupadd --system --gid 101 nginx \
   	&& useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx
   
  
positive.code: 
  
  ############################################# Base image for UBI #############################################
  FROM registry.access.redhat.com/ubi8/ubi:8.3 AS ubi-base
  
  LABEL name="NGINX Ingress Controller" \
  	description="The Ingress controller is an application that runs in a cluster and configures an HTTP load balancer according to Ingress resources." \
  
negative.code: 	&& echo "gpgcheck=1" >> /etc/yum.repos.d/nginx.repo \
  	&& echo "enabled=1" >> /etc/yum.repos.d/nginx.repo \
  	&& echo "module_hotfixes=true" >> /etc/yum.repos.d/nginx.repo \
  	&& microdnf --setopt=install_weak_deps=0 --nodocs install -y nginx-${NGINX_VERSION} \
  	&& rm /etc/yum.repos.d/nginx.repo
  
  
  ############################################# Base image for UBI with NGINX Plus #############################################
  FROM ubi-base AS ubi-plus
  
  ENV NGINX_PLUS_VERSION r23
  
  RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
  	--mount=type=secret,id=nginx-repo.key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
  