diff --git a/.gitignore b/.gitignore index 1d55a5d0..846616b2 100644 --- a/.gitignore +++ b/.gitignore @@ -24,4 +24,4 @@ testbin/* *.swo *~ .vscode/* -node-feature-discovery-operator \ No newline at end of file +./node-feature-discovery-operator \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index ddc9a304..c99ae210 100644 --- a/Dockerfile +++ b/Dockerfile @@ -21,8 +21,8 @@ FROM ${BASE_IMAGE_FULL} as full COPY --from=builder /workspace/node-feature-discovery-operator / COPY --from=builder /workspace/build/assets /opt/nfd -RUN useradd nfd-operator -USER nfd-operator +# Run as unprivileged user +USER 65534:65534 ENTRYPOINT ["/node-feature-discovery-operator"] LABEL io.k8s.display-name="node-feature-discovery-operator"