mirror of
https://github.com/wahyd4/cert-manager.git
synced 2026-08-15 08:07:07 +10:00
Kristian Klausen
4733fb6fcd
acmesolver won't run in a namespace with a restrictive PSP (Pod Security Policy)[1] without this change. Note: A numeric user id is required due to [1] [1] https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups [2] https://github.com/kubernetes/kubernetes/pull/56503
14 lines
374 B
Docker
14 lines
374 B
Docker
FROM alpine:3.6
|
|
|
|
RUN apk add --no-cache ca-certificates && \
|
|
adduser -S -u 100 acmesolver
|
|
|
|
ADD cert-manager-acmesolver_linux_amd64 /usr/bin/acmesolver
|
|
|
|
USER 100
|
|
ENTRYPOINT ["/usr/bin/acmesolver"]
|
|
ARG VCS_REF
|
|
LABEL org.label-schema.vcs-ref=$VCS_REF \
|
|
org.label-schema.vcs-url="https://github.com/jetstack/cert-manager" \
|
|
org.label-schema.license="Apache-2.0"
|