Skip to content

Commit eb0d53e

Browse files
committed
chore: run image as node user
Run elastalert image as unpriviledged user
1 parent d7253d5 commit eb0d53e

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

Dockerfile

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,5 +45,12 @@ COPY config/config.json config/config.json
4545
COPY rule_templates/ /opt/elastalert/rule_templates
4646
COPY elastalert_modules/ /opt/elastalert/elastalert_modules
4747

48+
# Add default rules directory
49+
# Set permission as unpriviledged user (1000:1000), compatible with Kubernetes
50+
RUN mkdir -p /opt/elastalert/rules/ /opt/elastalert/server_data/tests/ \
51+
&& chown -R node:node /opt
52+
53+
USER node
54+
4855
EXPOSE 3030
4956
ENTRYPOINT ["npm", "start"]

0 commit comments

Comments
 (0)