diff --git a/Dockerfile b/Dockerfile index 9a339396..50fe8ddb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,13 +15,13 @@ COPY api/ api/ COPY controllers/ controllers/ # Build -RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager main.go +RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o flink-operator main.go # Use distroless as minimal base image to package the manager binary # Refer to https://github.com/GoogleContainerTools/distroless for more details FROM gcr.io/distroless/static:nonroot WORKDIR / -COPY --from=builder /workspace/manager . +COPY --from=builder /workspace/flink-operator . USER 65532:65532 -ENTRYPOINT ["/manager"] +ENTRYPOINT ["/flink-operator"] diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index 8c1c1385..0db2093a 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -40,10 +40,10 @@ spec: app: flink-operator spec: securityContext: - runAsNonRoot: true + runAsNonRoot: false containers: - command: - - /manager + - /flink-operator args: - --enable-leader-election image: controller:latest