postgres-operator deployment template: run operator as non-root, and with readonly filesystem (#582)

This commit is contained in:
Erik Inge Bolsø
2019-06-14 15:47:08 +02:00
committed by Felix Kunde
parent 35a1f2cff8
commit 028b834ea6
2 changed files with 9 additions and 0 deletions
+5
View File
@@ -6,4 +6,9 @@ RUN apk --no-cache add ca-certificates
COPY build/* /
RUN addgroup -g 1000 pgo
RUN adduser -D -u 1000 -G pgo -g 'Postgres operator' pgo
USER 1000:1000
ENTRYPOINT ["/postgres-operator"]