Use non-root user in Dockerfile

[nonrtric.git] / helm-manager / Dockerfile

diff --git a/helm-manager/Dockerfile b/helm-manager/Dockerfile
index 90164fd..d15ddc7 100644 (file)
--- a/helm-manager/Dockerfile
+++ b/helm-manager/Dockerfile
@@ -49,4 +49,8 @@ COPY config/application.yaml .
 WORKDIR /opt/app/helm-manager
 COPY target/app.jar app.jar
 
+RUN groupadd -g 999 appuser && \
+    useradd -r -u 999 -g appuser appuser
+USER appuser
+
 CMD [ "java", "-jar", "app.jar" ]