FROM alpine:latest

ARG USER="user"

RUN apk add --no-cache kubectl gpg gpg-agent bash && \
    addgroup $USER && \
    adduser -G $USER -D $USER

COPY decrypt-secrets.sh /usr/local/bin/

USER $USER
WORKDIR /home/$USER

RUN gpg -k