diff --git a/Dockerfile b/Dockerfile index a1e5422..0446b39 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ FROM golang:alpine as builder -RUN adduser -D -g '' appuser +RUN adduser -D -g 65532 -u 65532 appuser RUN mkdir /build ADD . /build/ WORKDIR /build diff --git a/config/deployment.yaml b/config/deployment.yaml index 6767300..59d5284 100644 --- a/config/deployment.yaml +++ b/config/deployment.yaml @@ -22,8 +22,8 @@ spec: image: git.giftfish.de/ston1th/webhook-interceptor imagePullPolicy: Always securityContext: - runAsUser: 1000 - runAsGroup: 1000 + runAsUser: 65532 + runAsGroup: 65532 capabilities: drop: ["ALL"] resources: