diff --git a/docker/RO/Dockerfile b/docker/RO/Dockerfile index 8402b426a2e3480b3e0b4030190a347f3ee134ba..932fdc3a0fb0967162eb7eafc51cac55b9c229e2 100644 --- a/docker/RO/Dockerfile +++ b/docker/RO/Dockerfile @@ -98,10 +98,21 @@ COPY --from=INSTALL /usr/local/lib/python3.8/dist-packages /usr/local/lib/pytho COPY --from=INSTALL /usr/bin/genisoimage /usr/bin/genisoimage COPY --from=INSTALL /etc/protocols /etc/protocols -VOLUME /var/log/osm - EXPOSE 9090 +# Creating the user for the app +RUN groupadd -g 1000 appuser && \ + useradd -u 1000 -g 1000 -d /app appuser && \ + mkdir -p /app/osm_ro && \ + mkdir -p /app/storage/kafka && \ + mkdir /app/log && \ + chown -R appuser:appuser /app + +WORKDIR /app/osm_ro + +# Changing the security context +USER appuser + # Two mysql databases are needed (DB and DB_OVIM). Can be hosted on same or separated containers # These ENV must be provided ENV RO_DB_HOST="" @@ -143,4 +154,3 @@ HEALTHCHECK --start-period=130s --interval=10s --timeout=5s --retries=12 \ CMD curl --silent --fail http://localhost:9090/ro || exit 1 CMD ["python3", "-u", "-m", "osm_ng_ro.ro_main"] - diff --git a/installers/docker/osm_pods/ro.yaml b/installers/docker/osm_pods/ro.yaml index a8a6d7eb899aebaf4912da2a430c33f1c96f2ab5..a66be6d97d46be8c427e8b3a7e6346a058f9a226 100644 --- a/installers/docker/osm_pods/ro.yaml +++ b/installers/docker/osm_pods/ro.yaml @@ -62,4 +62,3 @@ spec: envFrom: - secretRef: name: ro-secret -