From 1c01d49f51b56706ee8562f2c1497d58e81fb8ee Mon Sep 17 00:00:00 2001
From: docker-claude <user@docker-claude.local>
Date: Wed, 15 Apr 2026 08:47:32 +0200
Subject: [PATCH] feat(claude): install kubectl into container image

---
 claude/Dockerfile | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/claude/Dockerfile b/claude/Dockerfile
index b48ae3a..a31c92b 100644
--- a/claude/Dockerfile
+++ b/claude/Dockerfile
@@ -8,6 +8,17 @@ RUN apk add --no-cache \
         bash \
         ttyd
 
+# Install kubectl — architecture-aware, checksum-verified
+RUN KUBECTL_VERSION=$(curl -fsSL https://dl.k8s.io/release/stable.txt) \
+    && ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') \
+    && curl -fsSL "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/${ARCH}/kubectl" \
+        -o /usr/local/bin/kubectl \
+    && curl -fsSL "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/${ARCH}/kubectl.sha256" \
+        -o /tmp/kubectl.sha256 \
+    && echo "$(cat /tmp/kubectl.sha256)  /usr/local/bin/kubectl" | sha256sum -c \
+    && rm /tmp/kubectl.sha256 \
+    && chmod +x /usr/local/bin/kubectl
+
 # Entrypoint used by the webui service (ttyd wrapping claude)
 COPY --chmod=755 webui-entrypoint.sh /usr/local/bin/webui-entrypoint.sh