From 0083676537566f979b415518d06871ef8f7a9a92 Mon Sep 17 00:00:00 2001 From: Moritz Johner Date: Wed, 9 Mar 2022 09:06:23 +0100 Subject: [PATCH] feat: use non-root user for base-image There is no need to use the root user. This allows the user to comply with pod security standards. Signed-off-by: Moritz Johner --- cluster-autoscaler/Dockerfile.amd64 | 2 +- cluster-autoscaler/Dockerfile.arm64 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/cluster-autoscaler/Dockerfile.amd64 b/cluster-autoscaler/Dockerfile.amd64 index 2a1681fe203a..32149f34e694 100644 --- a/cluster-autoscaler/Dockerfile.amd64 +++ b/cluster-autoscaler/Dockerfile.amd64 @@ -11,7 +11,7 @@ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. -ARG BASEIMAGE=gcr.io/distroless/static:latest-amd64 +ARG BASEIMAGE=gcr.io/distroless/static:nonroot-amd64 FROM $BASEIMAGE LABEL maintainer="Marcin Wielgus " diff --git a/cluster-autoscaler/Dockerfile.arm64 b/cluster-autoscaler/Dockerfile.arm64 index 3cbcb994d524..9a990ef1b57f 100644 --- a/cluster-autoscaler/Dockerfile.arm64 +++ b/cluster-autoscaler/Dockerfile.arm64 @@ -11,7 +11,7 @@ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. -ARG BASEIMAGE=gcr.io/distroless/static:latest-arm64 +ARG BASEIMAGE=gcr.io/distroless/static:nonroot-arm64 FROM $BASEIMAGE LABEL maintainer="Marcin Wielgus "