anchor.diff:  	&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/nginx-plus-8.repo \
   	&& echo "gpgcheck=1" >> /etc/yum.repos.d/nginx-plus-8.repo \
   	&& echo "enabled=1" >> /etc/yum.repos.d/nginx-plus-8.repo \
  -	&& yum install -y ca-certificates nginx-plus-${NGINX_PLUS_VERSION} \
  +	&& microdnf --setopt=install_weak_deps=0 --nodocs install -y nginx-plus-${NGINX_PLUS_VERSION} nginx-plus-module-njs-${NGINX_PLUS_VERSION} \
   	&& rm /etc/yum.repos.d/nginx-plus-8.repo
   
   COPY --chown=nginx:0 internal/configs/oidc/* /etc/nginx/oidc/
  
positive.code: 	&& echo "gpgcheck=1" >> /etc/yum.repos.d/nginx.repo \
  	&& echo "enabled=1" >> /etc/yum.repos.d/nginx.repo \
  	&& echo "module_hotfixes=true" >> /etc/yum.repos.d/nginx.repo \
  	&& yum install -y nginx-${NGINX_VERSION} \
  	&& rm /etc/yum.repos.d/nginx.repo
  
  
  ############################################# Base image for UBI with NGINX Plus #############################################
  FROM ubi-base AS ubi-plus
  
  ENV NGINX_PLUS_VERSION 23-1.el8.ngx
  
  RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
  	--mount=type=secret,id=nginx-repo.key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
  
negative.code: 	io.openshift.tags="nginx,ingress-controller,ingress,controller,kubernetes,openshift"
  
  RUN set -x \
  	&& microdnf --nodocs --enablerepo=ubi-8-baseos install -y shadow-utils \
  	&& groupadd --system --gid 101 nginx \
  	&& useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx
  
  