Run the CLI as non-root

Run the Flux CLI inside the container under the nobody user and group.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
pull/2342/head
Stefan Prodan 3 years ago
parent 030e166f43
commit 08412b72bc
No known key found for this signature in database
GPG Key ID: 3299AEB0E4085BAF

@ -20,4 +20,5 @@ RUN apk add --no-cache ca-certificates
COPY --from=builder /usr/local/bin/kubectl /usr/local/bin/ COPY --from=builder /usr/local/bin/kubectl /usr/local/bin/
COPY --chmod=755 flux /usr/local/bin/ COPY --chmod=755 flux /usr/local/bin/
USER 65534:65534
ENTRYPOINT [ "flux" ] ENTRYPOINT [ "flux" ]

Loading…
Cancel
Save