[BGD-4721] make spark operator non root by default

spotinst · Feb 9, 2024 · eae8763 · eae8763
1 parent c03b398
commit eae8763
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -36,11 +36,14 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -a -o /usr/bin
 
 FROM ${SPARK_IMAGE}
 USER root
-COPY --from=builder /usr/bin/spark-operator /usr/bin/
 RUN apt-get update --allow-releaseinfo-change \
     && apt-get update \
     && apt-get install -y openssl curl tini \
     && rm -rf /var/lib/apt/lists/*
+
+USER 185
+
+COPY --from=builder /usr/bin/spark-operator /usr/bin/
 COPY hack/gencerts.sh /usr/bin/
 
 COPY entrypoint.sh /usr/bin/