KEYCLOAK-11590 Add unprivileged user

fidgi · Oct 9, 2019 · 58b31e9 · 58b31e9
1 parent da51583
commit 58b31e9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/gatekeeper/Dockerfile b/gatekeeper/Dockerfile
@@ -10,6 +10,8 @@ LABEL Name=keycloak-gatekeeper \
       Url=https://github.com/keycloak/keycloak-gatekeeper \
       Help=https://issues.jboss.org/projects/KEYCLOAK
 
+RUN adduser -D -u 1000 gatekeeper
+
 RUN apk add --no-cache ca-certificates curl tar
 
 WORKDIR "/opt"
@@ -18,4 +20,6 @@ RUN curl -fssL "https://downloads.jboss.org/keycloak/$KEYCLOAK_VERSION/gatekeepe
 
 RUN apk del curl tar
 
+USER 1000
+
 ENTRYPOINT [ "/opt/keycloak-gatekeeper" ]