mirror of
https://github.com/ysoftdevs/imagepullsecret-injector.git
synced 2026-03-22 09:09:48 +01:00
Make the deployment and the jobs run in a non-root environment
This commit is contained in:
@@ -7,4 +7,7 @@ RUN make build
|
|||||||
FROM alpine:3.13.4 as base
|
FROM alpine:3.13.4 as base
|
||||||
COPY --from=builder /go/src/github.com/ysoftdevs/imagepullsecret-injector/build/_output/bin/imagepullsecret-injector /usr/local/bin/imagepullsecret-injector
|
COPY --from=builder /go/src/github.com/ysoftdevs/imagepullsecret-injector/build/_output/bin/imagepullsecret-injector /usr/local/bin/imagepullsecret-injector
|
||||||
|
|
||||||
|
RUN addgroup -S imagepullsecret-injector-group && adduser -S imagepullsecret-injector-user -G imagepullsecret-injector-group
|
||||||
|
USER imagepullsecret-injector-user
|
||||||
|
|
||||||
ENTRYPOINT ["imagepullsecret-injector"]
|
ENTRYPOINT ["imagepullsecret-injector"]
|
||||||
@@ -1,6 +1,9 @@
|
|||||||
FROM alpine:3.13.4
|
FROM alpine:3.13.4
|
||||||
|
|
||||||
RUN apk add bash curl openssl \
|
RUN addgroup -S imagepullsecret-injector-group && adduser -S imagepullsecret-injector-user -G imagepullsecret-injector-group \
|
||||||
|
&& apk add bash curl openssl jq \
|
||||||
&& curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
|
&& curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
|
||||||
&& chmod 755 ./kubectl \
|
&& chmod 755 ./kubectl \
|
||||||
&& mv ./kubectl /usr/bin/kubectl
|
&& mv ./kubectl /usr/bin/kubectl
|
||||||
|
|
||||||
|
USER imagepullsecret-injector-user
|
||||||
|
|||||||
@@ -20,4 +20,4 @@ version: 0.0.21
|
|||||||
# This is the version number of the application being deployed. This version number should be
|
# This is the version number of the application being deployed. This version number should be
|
||||||
# incremented each time you make changes to the application. Versions are not expected to
|
# incremented each time you make changes to the application. Versions are not expected to
|
||||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||||
appVersion: 0.0.11
|
appVersion: 0.0.12
|
||||||
|
|||||||
Reference in New Issue
Block a user