search

cptactionhank / docker-atlassian-jira-service-desk

Atlassian JIRA Service Desk wrapped in a Docker image
https://cptactionhank.github.io/docker-atlassian-jira-service-desk
MIT License
48 stars 39 forks source link

Create non-root jira user and reference UID #10

Closed KashifSaadat closed 5 years ago

KashifSaadat commented 6 years ago

When running this image in a Kubernetes Cluster and specifying runAsNonRoot in your security context, the pod is rejected as it does not specify a non-numeric USER in the spec (can't determine that the user is not root). Related PR: https://github.com/kubernetes/kubernetes/pull/56503 You can set runAsUser to a UID in your deployment spec to bypass this, but I thought it better to solve within the Dockerfile so other users won't run into this problem.

The USER could be changed to reference 2 (the UID for daemon user), but I thought this was a good point to create a specific user for the app (jira, UID 1000).

KashifSaadat commented 5 years ago

@cptactionhank sorry to prod, would you be able to review this please?