tarantool/tarantool-operator

Cannot verify user is non-root

vanyarock01 opened this issue · 2 comments

vanyarock01 commented

I'm trying to deploy an application with non-privileged (any non-root user) containers:

Error: container has runAsNonRoot and image has non-numeric user (tarantool), cannot verify user is non-root
vanyarock01 commented

The reason is that the container is not privileged.

The image created with cartridge-cli has a default user named tarantool. At startup, k8s cannot verify that the user (tarantool) is non-root.

The problem has two solutions:

  1. Start a container with a default non-root user with ID 1000.
  2. Find ID of tarantool user and pass them. This is not easy, since the tarantool user ID is not set externally.

UPD: The problem is solved by using id when building a docker image, more details here.

vanyarock01 commented

Fixed on cartridge-cli side.