diff --git a/Dockerfile b/Dockerfile
index b104f48f..5c3a9560 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,7 +23,8 @@ COPY internal/controller/ internal/controller/
 # by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
 RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o manager main.go
 
-# Use alpine to have the smallest image possible while being able to use a required package for the code 
+# Use alpine instead of distroless to have the smallest image possible while being able to use a required package for the code (htpasswd)
+# TODO(atlas): Move back to gcr.io/distroless/static:nonroot once we do not need htpasswd
 FROM alpine:3.19.1
 RUN apk add --no-cache ca-certificates
 RUN apk add apache2-utils