Run kube2ms registrator as non-root user

Change-Id: I2165e080af7c6027548288432c8437503903ee12
Issue-ID: MSB-322
Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com>

diff --git a/build/docker/Dockerfile b/build/docker/Dockerfile
index f25e592..511964d 100644 (file)
--- a/build/docker/Dockerfile
+++ b/build/docker/Dockerfile
@@ -1,4 +1,9 @@
 FROM alpine:3.3\r
 COPY kube2msb /bin/\r
 \r
+RUN addgroup -g 1000 msb && \\r
+    adduser -D -u 1000 -G msb msb && \\r
+    chown msb:msb /bin/kube2msb\r
+USER msb\r
+\r
 ENTRYPOINT /bin/kube2msb --kube_master_url=${KUBE_MASTER_URL} --auth_token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) --msb_url=${MSB_URL}\r