diff --git a/Dockerfile b/Dockerfile
index bfca62830749be6ae315b82ae00b189e5341c1e6..d495f129569726ee87a8300c26a30a54eccfd4ea 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,10 +9,6 @@ FROM opensource/istio-1.6/pilot-1.6/pilot:1.6.1 AS base
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
-COPY --from=base /usr/local/bin/pilot-discovery /usr/local/bin/
-COPY --from=base /cacert.pem /cacert.pem
-###############################################################
-# Provide label information
 LABEL name="istio-pilot" \
       maintainer="gavin.scallon@parsons.com" \
       vendor="Open Source" \
@@ -20,8 +16,11 @@ LABEL name="istio-pilot" \
       release="1" \
       summary="Istio Pilot provides traffic management capabilities in the Istio Service mesh" \
       description="provides service discovery for the Envoy sidecars, traffic management capabilities for intelligent routing, and resiliency."
-###############################################################
-# Run as non-root user
+
+COPY --from=base /usr/local/bin/pilot-discovery /usr/local/bin/
+COPY --from=base /cacert.pem /cacert.pem
+
+EXPOSE 80 443
 USER 1001
 ###############################################################
 ENTRYPOINT [ "/usr/local/bin/pilot-discovery" ]