Merge pull request #70 from funkypenguin/make-psps-happy

Use numeric UID/GID to satisfy PSPs
kiwigrid · Apr 28, 2020 · fb6f71d · fb6f71d
2 parents 7e7fbf9 + 9116e56
commit fb6f71d
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -10,6 +10,8 @@ RUN         apk add --no-cache gcc && \
 
 COPY sidecar/* ./
 
-#run as non-privileged user 
-USER nobody
+# Use the nobody user's numeric UID/GID to satisfy MustRunAsNonRoot PodSecurityPolicies
+# https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups
+USER 65534:65534
+
 CMD         [ "python", "-u", "/app/sidecar.py" ]