Merge pull request #11 from negz/release-0.1-permissions

[Backport release-0.1] Grant UID 2000 access to do Terraform things
crossplane-contrib · Jul 9, 2021 · a730bf4 · a730bf4
2 parents 2907a32 + bbc8475
commit a730bf4
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/cluster/images/provider-terraform-controller/Dockerfile b/cluster/images/provider-terraform-controller/Dockerfile
@@ -5,9 +5,11 @@ ARG TINI_VERSION
 
 ADD provider /usr/local/bin/crossplane-terraform-provider
 
+# As of Crossplane v1.3.0 provider controllers run as UID 2000.
+# https://github.com/crossplane/crossplane/blob/v1.3.0/internal/controller/pkg/revision/deployment.go#L32
 RUN mkdir /tf
-RUN chown 1001 /tf
+RUN chown 2000 /tf
 
 EXPOSE 8080
-USER 1001
+USER 2000
 ENTRYPOINT ["crossplane-terraform-provider"]