mirror of
https://github.com/ysoftdevs/imagepullsecret-injector.git
synced 2026-05-05 23:43:22 +02:00
Make the deployment and the jobs run in a non-root environment
This commit is contained in:
@@ -1,6 +1,9 @@
|
||||
FROM alpine:3.13.4
|
||||
|
||||
RUN apk add bash curl openssl \
|
||||
RUN addgroup -S imagepullsecret-injector-group && adduser -S imagepullsecret-injector-user -G imagepullsecret-injector-group \
|
||||
&& apk add bash curl openssl jq \
|
||||
&& curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
|
||||
&& chmod 755 ./kubectl \
|
||||
&& mv ./kubectl /usr/bin/kubectl
|
||||
|
||||
USER imagepullsecret-injector-user
|
||||
|
||||
Reference in New Issue
Block a user