Be rootless on mda images

SocialGouv / mda

Aider les personnes concernées par l'autisme à trouver leurs réponses et à mener à bien leurs démarches.

Apache License 2.0

5 stars 0 forks source link

Be rootless on mda images #236

Open paulsouche opened 1 year ago

paulsouche commented 1 year ago

getmeili/meilisearch:1.1.0, debian:buster are not rootless images.

This ticket implies

Try to run the meilisearch image not in root mode and eventually create a new image

Mount files rootless on azure volume (to be able to delete the files) and change the debian image

Example of mount

volumes:
- name: ftp-files
  csi:
    driver: file.csi.azure.com
    readOnly: false
    volumeAttributes:
      secretName: ftp-share
      secretNamespace: ftp-test
      shareName: ftp
      mountOptions: "uid=1001"

More here

devthejo commented 1 year ago

or more simple, if definitively not needed, remove the azure share and implement simple volume