Docker image uses a numeric user ID

[rhr323]

Summary

Running the Kibana docker image on kubernetes with runAsRoot set to false results in:

Error: container has runAsNonRoot and image has non-numeric user (kibana), cannot verify user is non-root (pod: "...", container: ...)

This PR changes the Dockerfile so it uses a numeric user ID (1000), similarly to Elasticsearch.

Checklist

n/a

Risk Matrix

n/a

For maintainers

• This was checked for breaking API changes and was labeled appropriately

[mistic]

Just double checking this change with @jbudz . Jon, can you think about something that could be broken by this?

[rhr323]

Thanks @mistic! Is there a way to build the image from this PR? I'd be happy to test the change in a serverless environment, once I have the image available.

[Ikuni17]

@rhr323 I added the label to build a serverless image and triggered a new build. kibana-ci will comment with the image url and it will be available at the top of BK build.

[rhr323]

Tested in my serverless dev env:

$ kubectl get pods
NAME                                     READY   STATUS      RESTARTS   AGE
es-es-index-7b7d5f9dcc-87z7b             1/1     Running     0          147m
es-es-ml-667b6f7575-7fm4r                1/1     Running     0          147m
es-es-search-748d4847d-k2q9h             1/1     Running     0          147m
kb-background-tasks-kb-cc7ddd45d-4fhgl   1/1     Running     0          20m
kb-migrator-kb-msnd4                     0/1     Completed   0          19m
kb-ui-kb-57f464d-jh9st                   1/1     Running     0          20m

$ kubectl describe pod kb-ui-kb-57f464d-jh9st | grep Image:
    Image:         docker.elastic.co/kibana-ci/kibana-serverless:pr-168617-82249c51fb7e
    Image:         docker.elastic.co/kibana-ci/kibana-serverless:pr-168617-82249c51fb7e
    Image:          docker.elastic.co/kibana-ci/kibana-serverless:pr-168617-82249c51fb7e

Everything seems to work fine, I created an alert connector + sample alert for testing, no issues observed.

[kibana-ci]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 7790fdc
• Kibana Serverless Image: docker.elastic.co/kibana-ci/kibana-serverless:pr-168617-7790fdc6febb

Failed CI Steps

• FTR Configs #78

Metrics [docs]

Canvas Sharable Runtime

The Canvas "shareable runtime" is an bundle produced to enable running Canvas workpads outside of Kibana. This bundle is included in third-party webpages that embed canvas and therefor should be as slim as possible.

id	before	after	diff
module count	-	5596	+5596
total size	-	5.9MB	+5.9MB

History

• 💔 Build #167399 failed 82249c5
• 💛 Build #167012 was flaky c455b9a

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream