Run the CLI as non-root
Run the Flux CLI inside the container under the nobody user and group. Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
@@ -20,4 +20,5 @@ RUN apk add --no-cache ca-certificates
|
||||
COPY --from=builder /usr/local/bin/kubectl /usr/local/bin/
|
||||
COPY --chmod=755 flux /usr/local/bin/
|
||||
|
||||
USER 65534:65534
|
||||
ENTRYPOINT [ "flux" ]
|
||||
|
||||
Reference in New Issue
Block a user