FROM python:3.12-slim

# kubectl installieren (gleiche Version wie dein Cluster)
ARG KUBECTL_VERSION=v1.32.0
RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates \
    && curl -fsSL "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
       -o /usr/local/bin/kubectl \
    && chmod +x /usr/local/bin/kubectl \
    && apt-get remove -y curl && apt-get autoremove -y \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY server.py .

# Non-root User fuer Security
RUN useradd -u 1000 -m mcp
USER 1000

EXPOSE 8000
CMD ["python", "server.py"]