From 0cfbdf642ba0e1fcdebc21298fa2218bed7ab05c Mon Sep 17 00:00:00 2001 From: Jye Lee Date: Thu, 10 Dec 2020 09:37:49 -0800 Subject: [PATCH] Run as user 1000 so pod can be runAsNonRoot for security purposes --- Dockerfile | 2 ++ Dockerfile.dev | 2 ++ 2 files changed, 4 insertions(+) diff --git a/Dockerfile b/Dockerfile index 46f418b1d..0329de3e7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -23,6 +23,8 @@ FROM scratch MAINTAINER Avesh Agarwal +USER 1000 + COPY --from=0 /go/src/sigs.k8s.io/descheduler/_output/bin/descheduler /bin/descheduler CMD ["/bin/descheduler", "--help"] diff --git a/Dockerfile.dev b/Dockerfile.dev index 2f626b90c..0783c193a 100644 --- a/Dockerfile.dev +++ b/Dockerfile.dev @@ -15,6 +15,8 @@ FROM scratch MAINTAINER Avesh Agarwal +USER 1000 + COPY _output/bin/descheduler /bin/descheduler CMD ["/bin/descheduler", "--help"]