Run init container cp-solr-xml as nonRoot
- Dominant language
- Go
- Stars
- 283
- Forks
- 148
- PR merge metrics
- No merged PRs in 30d
Description
Today we use busybox image with root user to run the cp-solr-xml init. This prevents `runAsNonRoot: true` to be set on the Solr pod. Either find a variant of busybox with non-root user, or explicitly specify `runAsUser: 65534` on the init container. Busybox image has a `nobody` user available ootb that I think we could use:
```bash
# docker run --rm busybox cat /etc/passwd
root:x:0:0:root:/root:/bin/sh
daemon:x:1:1:daemon:/usr/sbin:/bin/false
bin:x:2:2:bin:/bin:/bin/false
sys:x:3:3:sys:/dev:/bin/false
sync:x:4:100:sync:/bin:/bin/sync
mail:x:8:8:mail:/var/spool/mail:/bin/false
www-data:x:33:33:www-data:/var/www:/bin/false
operator:x:37:37:Operator:/var:/bin/false
nobody:x:65534:65534:nobody:/home:/bin/false
```
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.