zapier / prom-aggregation-gateway

An aggregating push gateway for Prometheus
Mozilla Public License 2.0
116 stars 26 forks source link

Run as Non-Root User #59

Closed diarmuidie closed 1 year ago

diarmuidie commented 1 year ago

It's not possible to run the prebuilt images on a Kubernetes cluster that require pods to adhere to the Restricted Pod Security Standard because the image runs as the root user.

This PR changes to using the unprivileged nobody user, similar to how the prometheus push gateway does it: https://github.com/prometheus/pushgateway/blob/master/Dockerfile#L14