Skip to content

Commit

Permalink
Create user accounts for server components in smoke tests
Browse files Browse the repository at this point in the history
Add users for kube-controller-manager, kube-scheduler and
konnectivity-server in footloose-alpine docker image so those process
runs as non-root.

Signed-off-by: Natanael Copa <ncopa@mirantis.com>
  • Loading branch information
ncopa committed Nov 17, 2020
1 parent 805d786 commit a00b7ec
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion inttest/footloose-alpine/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ RUN echo "#!/bin/sh" > /etc/local.d/machine-id.start \
&& echo "fi" >> /etc/local.d/machine-id.start \
&& chmod +x /etc/local.d/machine-id.start

RUN for i in etcd kube-apiserver; do \
RUN for i in etcd kube-apiserver kube-controller-manager kube-scheduler konnectivity-server; do \
adduser -H -S -s /sbin/nologin $i; \
done

Expand Down

0 comments on commit a00b7ec

Please sign in to comment.