diff options
| author |   Dan Timoney <dtimoney@att.com> | 2020-04-28 14:02:37 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2020-04-28 14:02:37 +0000 |
| commit | 8134100d6d92a75906a55cb56b993179e97e01ec (patch) | |
| tree | f91fabf31e5cea8c8a7dda2b7711188e1f4e7562 /ms/blueprintsprocessor | |
| parent | 3d1df1b148ff42227dfaca470d395e3270623d60 (diff) | |
| parent | b1362860131464876a09890c59cb949e1587bf23 (diff) | |
Merge "Making POD run as non-root" into frankfurt
Diffstat (limited to 'ms/blueprintsprocessor')
| -rwxr-xr-x | ms/blueprintsprocessor/application/src/main/docker/Dockerfile | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/ms/blueprintsprocessor/application/src/main/docker/Dockerfile b/ms/blueprintsprocessor/application/src/main/docker/Dockerfile index 1035915f1..042041ebb 100755 --- a/ms/blueprintsprocessor/application/src/main/docker/Dockerfile +++ b/ms/blueprintsprocessor/application/src/main/docker/Dockerfile @@ -9,9 +9,14 @@ FROM omahoco1/alpine-java-python # add entrypoint COPY startService.sh /startService.sh +RUN addgroup -S onap && adduser -S onap -G onap +RUN chown onap:onap /startService.sh RUN chmod 777 /startService.sh && dos2unix /startService.sh # add application COPY --from=extractor /opt /opt +RUN mkdir /opt/app/onap/blueprints +RUN chown onap:onap /opt -R +USER onap ENTRYPOINT [ "/startService.sh" ] |