apache / apache/solr-operator

Run init container cp-solr-xml as nonRoot

Open
#582 0 comments 0 reactions 1 assignee Claimed by @HoustonPutman View on GitHub
Dominant language
Go
Stars
283
Forks
148
PR merge metrics
No merged PRs in 30d

Description

Today we use busybox image with root user to run the cp-solr-xml init. This prevents `runAsNonRoot: true` to be set on the Solr pod. Either find a variant of busybox with non-root user, or explicitly specify `runAsUser: 65534` on the init container. Busybox image has a `nobody` user available ootb that I think we could use:

```bash
# docker run --rm busybox cat /etc/passwd
root:x:0:0:root:/root:/bin/sh
daemon:x:1:1:daemon:/usr/sbin:/bin/false
bin:x:2:2:bin:/bin:/bin/false
sys:x:3:3:sys:/dev:/bin/false
sync:x:4:100:sync:/bin:/bin/sync
mail:x:8:8:mail:/var/spool/mail:/bin/false
www-data:x:33:33:www-data:/var/www:/bin/false
operator:x:37:37:Operator:/var:/bin/false
nobody:x:65534:65534:nobody:/home:/bin/false
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.