authzed / spicedb-operator

Kubernetes controller for managing instances of SpiceDB
Apache License 2.0
62 stars 26 forks source link

Build from distroless/base:nonroot #242

Closed jawnsy closed 11 months ago

jawnsy commented 11 months ago

Switch from the default distroless image (which runs as root) to the distroless image (which runs as uid 65532)

Related to #237

jawnsy commented 11 months ago

You can compare the User in the manifest for the latest image vs the nonroot tag using these links:

https://explore.ggcr.dev/?image=gcr.io%2Fdistroless%2Fbase%3Alatest

https://explore.ggcr.dev/?image=gcr.io%2Fdistroless%2Fbase%3Anonroot