Merge branch 'the-spice-must-flow' into 'main'

Add SpiceDB Authorization

See merge request gitlab-org/software-supply-chain-security/authorization/sparkled!19

1 files changed, 6 insertions, 1 deletions

diff --git a/Dockerfile b/Dockerfile
index f0e5727..1b2f792 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,6 +8,9 @@ RUN apt-get update && apt-get install -y wget && \
     wget -O /usr/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v1.2.5/dumb-init_1.2.5_x86_64 && \
     chmod +x /usr/bin/dumb-init
 
+# Build stage for getting SpiceDB binary
+FROM authzed/spicedb:latest AS spicedb-binary
+
 # Build stage for sparkle
 FROM golang:1.24-alpine AS build
 ENV CGO_ENABLED=0
@@ -24,11 +27,13 @@ WORKDIR /
 USER root
 RUN ["/busybox/sh", "-c", "ln -s /busybox/sh /bin/sh"]
 USER nonroot
-COPY --from=envoy-binary /usr/local/bin/envoy /bin/envoy
 COPY --from=dumb-init-builder /usr/bin/dumb-init /bin/dumb-init
+COPY --from=envoy-binary /usr/local/bin/envoy /bin/envoy
+COPY --from=spicedb-binary /usr/local/bin/spicedb /bin/spicedb
 COPY --from=build /app/Procfile /Procfile
 COPY --from=build /app/bin/envoy-shim /bin/envoy-shim
 COPY --from=build /app/etc/envoy /etc/envoy
+COPY --from=build /app/etc/authzd /etc/authzd
 COPY --from=build /app/public /public
 COPY --from=build /bin/authzd /bin/authzd
 COPY --from=build /bin/sparkled /bin/sparkled