fix(infra): ensure base images use target platform

admission-server/Dockerfile

@@ -20,7 +20,7 @@ RUN pnpm run --filter=./admission-server build
 # Deploy
 RUN pnpm --filter=./admission-server --prod deploy pruned
 
-FROM --platform=${BUILDPLATFORM} node:lts-slim
+FROM --platform=${TARGETPLATFORM} node:lts-slim
 
 WORKDIR /app
 

cdn-server/Dockerfile

@@ -21,7 +21,7 @@
 # Deploy
 RUN pnpm --filter=./cdn-server --prod deploy pruned
 
-FROM --platform=${BUILDPLATFORM} node:lts-slim
+FROM --platform=${TARGETPLATFORM} node:lts-slim
 
 WORKDIR /app
 

controlplane/Dockerfile

@@ -32,7 +32,7 @@
 # Deploy
 RUN pnpm --filter=./controlplane --prod deploy pruned
 
-FROM --platform=${BUILDPLATFORM} node:lts-alpine
+FROM --platform=${TARGETPLATFORM} node:lts-alpine
 
 WORKDIR /app
 

graphqlmetrics/Dockerfile

@@ -23,7 +23,7 @@
 # Build router
 RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -trimpath -ldflags "-extldflags -static -X github.com/wundergraph/cosmo/graphqlmetrics/core.Version=${VERSION}" -a -o graphqlmetrics cmd/main.go
 
-FROM --platform=${BUILDPLATFORM} gcr.io/distroless/base-debian12
+FROM --platform=${TARGETPLATFORM} gcr.io/distroless/base-debian12
 
 COPY --from=builder /app/graphqlmetrics /graphqlmetrics
 COPY --from=builder /app/migrations /migrations

keycloak/Dockerfile

@@ -12,7 +12,7 @@
 
 RUN ./build.sh
 
-FROM --platform=${BUILDPLATFORM} bitnamilegacy/keycloak:26.2.5
+FROM --platform=${TARGETPLATFORM} bitnamilegacy/keycloak:26.2.5
 
 COPY --from=0 /app/target/*.jar /opt/bitnami/keycloak/providers/
 
@@ -22,4 +22,4 @@
 RUN /opt/bitnami/keycloak/bin/kc.sh build --db=postgres --metrics-enabled true --health-enabled true --http-relative-path "/"
 
 EXPOSE 8080
-EXPOSE 8443
+EXPOSE 8443

otelcollector/Dockerfile

@@ -12,18 +12,17 @@
 
 COPY ./otelcol-builder.yaml ./otelcol-builder.yaml
 
-RUN ./ocb --config otelcol-builder.yaml \
+RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} ./ocb --config otelcol-builder.yaml \
     && chmod +x /app/otelcol-dev/otelcol \
     && /app/otelcol-dev/otelcol --version
 
-FROM --platform=${BUILDPLATFORM} golang:1.25
+FROM --platform=${TARGETPLATFORM} golang:1.25
 
 COPY ./otel-config.yaml /etc/otel-config.yaml
 COPY --from=builder /app/otelcol-dev/otelcol /otelcol
 
 # smoke test
 RUN /otelcol --version
 
-
 ENTRYPOINT ["/otelcol"]
 CMD ["--config", "/etc/otel-config.yaml"]

router/Dockerfile

@@ -31,7 +31,7 @@
     -X 'github.com/wundergraph/cosmo/router/core.Date=${DATE}'" \
     -a -o router cmd/router/main.go
 
-FROM --platform=${BUILDPLATFORM} gcr.io/distroless/base-debian12:nonroot AS nonroot
+FROM --platform=${TARGETPLATFORM} gcr.io/distroless/base-debian12:nonroot AS nonroot
 
 # nonroot user uid
 USER 65532
@@ -45,7 +45,7 @@
 
 EXPOSE 3002
 
-FROM --platform=${BUILDPLATFORM} gcr.io/distroless/base-debian12
+FROM --platform=${TARGETPLATFORM} gcr.io/distroless/base-debian12
 
 COPY --from=builder /app/router /router
 

studio/Dockerfile

@@ -24,7 +24,7 @@
 ARG NEXT_PUBLIC_SENTRY_ENABLED
 ARG NEXT_PUBLIC_SENTRY_REPLAY_ENABLED
 ARG SENTRY_DEBUG
 ARG SENTRY_AUTH_TOKEN
 ARG SENTRY_ORG
 ARG SENTRY_PROJECT
 ARG SENTRY_SERVER_SAMPLE_RATE
@@ -33,7 +33,7 @@
 ENV NEXT_PUBLIC_SENTRY_ENABLED=$NEXT_PUBLIC_SENTRY_ENABLED
 ENV NEXT_PUBLIC_SENTRY_REPLAY_ENABLED=$NEXT_PUBLIC_SENTRY_REPLAY_ENABLED
 ENV SENTRY_DEBUG=$SENTRY_DEBUG
 ENV SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
 ENV SENTRY_ORG=$SENTRY_ORG
 ENV SENTRY_PROJECT=$SENTRY_PROJECT
 ENV SENTRY_SERVER_SAMPLE_RATE=$SENTRY_SERVER_SAMPLE_RATE
@@ -45,7 +45,7 @@
 
 RUN pnpm run --filter=./connect --filter=./shared --filter=./studio --filter=./composition build
 
-FROM --platform=${BUILDPLATFORM} node:lts-alpine
+FROM --platform=${TARGETPLATFORM} node:lts-alpine
 
 WORKDIR /app
 
@@ -68,4 +68,4 @@
 ENV PORT=3000
 ENV HOSTNAME=localhost
 
-CMD ["node", "./studio/server.js"]
+CMD ["node", "./studio/server.js"]