Skip to content

Hardening: run the service with the least privilege

Pablo Vigo Mas requested to merge wip/pvigo/least-privilegies into master

The idea of this MR is to prevent running services as root and reduce any security issues in our services. To accomplish was decided to add a different user in the Docker images and configure the values of the Helm Chart. The container was configured with user 1022 instead of user root. SecurityContext was configured to deploy the service in k8s using this user ID. A User apertis was added in the Docker image to prevent the -I have no name- message

Phabricator task: T10105

Signed-off-by: Pablo Vigo pvigo@collabora.com

Merge request reports