Skip to content

Commit d10e373

Browse files
committed
Helm chart bug Fix: Make sure image has nonRoot (#195)
<!--- Note to EXTERNAL Contributors --> <!-- Thanks for opening a PR! If it is a significant code change, please **make sure there is an open issue** for this. We work best with you when we have accepted the idea first before you code. --> <!--- For ALL Contributors 👇 --> ## What was changed - Make sure that the image, during create time, has the right image config so that kubelet can rightly validate against it. - kubelet could not prove that the string "USER nonroot" is not the root. The following changes do that. ## Why? - Correctness. ## Checklist <!--- add/delete as needed ---> 1. Closes <!-- add issue number here --> #192 #193 3. How was this tested: <!--- Please describe how you tested your changes/how we can test them --> 4. Any docs updates needed? <!--- update README if applicable or point out where to update docs.temporal.io -->
1 parent db60f92 commit d10e373

1 file changed

Lines changed: 1 addition & 3 deletions

File tree

Dockerfile.goreleaser

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@ FROM gcr.io/distroless/static-debian12:nonroot
22

33
WORKDIR /app
44

5-
COPY --chown=nonroot:nonroot temporal-worker-controller /usr/local/bin/temporal-worker-controller
6-
7-
USER nonroot
5+
COPY --chown=65532:65532 temporal-worker-controller /usr/local/bin/temporal-worker-controller
86

97
ENTRYPOINT ["temporal-worker-controller"]

0 commit comments

Comments
 (0)