make image be rootless

brancz · Aug 19, 2020 · feca0a7 · feca0a7
1 parent d547977
commit feca0a7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,8 +1,8 @@
-FROM gcr.io/distroless/static
+FROM gcr.io/distroless/static:nonroot
 
 ARG BINARY=kube-rbac-proxy-linux-amd64
 COPY _output/$BINARY /usr/local/bin/kube-rbac-proxy
-
 EXPOSE 8080
+USER 1001:1001
 
 ENTRYPOINT ["/usr/local/bin/kube-rbac-proxy"]