Non root docker images and upgrade version to v0.12.5 (#132)

kyma-incubator · Dec 2, 2020 · 1e8d425 · 1e8d425
1 parent f4713dd
commit 1e8d425
Show file tree

Hide file tree

Showing 7 changed files with 13 additions and 7 deletions.
diff --git a/components/channel/Dockerfile b/components/channel/Dockerfile
@@ -42,7 +42,9 @@ RUN mkdir -p lib64 \
 
 
 # Create The Final Docker Container From Google's Distroless Base
-FROM gcr.io/distroless/base
+FROM gcr.io/distroless/base:nonroot
+
+USER 1000:1000
 
 # Manage malloc and os thread count that can execute go code.
 ENV MALLOC_ARENA_MAX=1 GOMAXPROCS=1

diff --git a/components/channel/Makefile b/components/channel/Makefile
@@ -11,7 +11,7 @@ BUILD_TESTS:=true
 
 # Application Names (Align With Knative Eventing Version)
 APP_NAME=knative-kafka-channel
-APP_VERSION=v0.12.3
+APP_VERSION=v0.12.5
 
 # Build / Packaging / Deployment Configuration
 APP_PATH=eu.gcr.io/kyma-project/incubator

diff --git a/components/common/Makefile b/components/common/Makefile
@@ -10,7 +10,7 @@ BUILD_DIR:=$(BUILD_ROOT)/build
 
 # Application Names (Align With Knative Eventing Version)
 APP_NAME=knative-kafka-common
-APP_VERSION=v0.12.3
+APP_VERSION=v0.12.5
 
 # Build / Packaging / Deployment Configuration
 APP_TAG=$(APP_NAME):$(APP_VERSION)

diff --git a/components/controller/Dockerfile b/components/controller/Dockerfile
@@ -45,7 +45,9 @@ RUN mkdir -p lib64 \
 
 
 # Create Docker Container From Google's distroless base
-FROM gcr.io/distroless/base
+FROM gcr.io/distroless/base:nonroot
+
+USER 1000:1000
 
 # Manage malloc and os thread count that can execute go code.
 ENV MALLOC_ARENA_MAX=1 GOMAXPROCS=1

diff --git a/components/controller/Makefile b/components/controller/Makefile
@@ -11,7 +11,7 @@ BUILD_TESTS:=true
 
 # Application Names (Align With Knative Eventing Version)
 APP_NAME=kafka-channel-controller
-APP_VERSION=v0.12.3
+APP_VERSION=v0.12.5
 
 # Build / Packaging / Deployment Configuration
 APP_PATH=eu.gcr.io/kyma-project/incubator

diff --git a/components/dispatcher/Dockerfile b/components/dispatcher/Dockerfile
@@ -41,7 +41,9 @@ RUN mkdir -p lib64 \
     && cp /lib64/ld-linux-x86-64.so.2 lib64/ld-linux-x86-64.so.2
 
 # Create Docker Container From Google's distroless base
-FROM gcr.io/distroless/base
+FROM gcr.io/distroless/base:nonroot
+
+USER 1000:1000
 
 # Manage malloc and os thread count that can execute go code.
 ENV MALLOC_ARENA_MAX=1 GOMAXPROCS=1

diff --git a/components/dispatcher/Makefile b/components/dispatcher/Makefile
@@ -11,7 +11,7 @@ BUILD_TESTS:=true
 
 # Application Names (Align With Knative Eventing Version)
 APP_NAME=knative-kafka-dispatcher
-APP_VERSION=v0.12.3
+APP_VERSION=v0.12.5
 
 # Build / Packaging / Deployment Configuration
 APP_PATH=eu.gcr.io/kyma-project/incubator