Make the deployment and the jobs run in a non-root environment

This commit is contained in:
Martin Šalata
2021-07-26 10:31:31 +02:00
parent 233491dec9
commit f7dc6589f5
4 changed files with 10 additions and 4 deletions

View File

@@ -7,4 +7,7 @@ RUN make build
FROM alpine:3.13.4 as base
COPY --from=builder /go/src/github.com/ysoftdevs/imagepullsecret-injector/build/_output/bin/imagepullsecret-injector /usr/local/bin/imagepullsecret-injector
ENTRYPOINT ["imagepullsecret-injector"]
RUN addgroup -S imagepullsecret-injector-group && adduser -S imagepullsecret-injector-user -G imagepullsecret-injector-group
USER imagepullsecret-injector-user
ENTRYPOINT ["imagepullsecret-injector"]