search

nats-io / nats-box

A container with NATS utilities
Apache License 2.0
105 stars 32 forks source link

Run image as non-root #36

Closed marcinc closed 1 year ago

marcinc commented 1 year ago

Running as root can cause security risk and should be avoided if at all possible. Running the image as non-root is considered a best practice.

Related to https://github.com/nats-io/nats-box/pull/30

caleblloyd commented 1 year ago

Added a nats user/group with UID/GID 1000:1000 in #47 and it will be in the next release

This is still opt-in for backwards compatibility issues, so on k8s will still require specifying runAsUser