USER root
-# Create onap user/group (previously provided by onap/integration-python base image)
-RUN addgroup -S onap && adduser -S -G onap onap
+# Create onap user/group with fixed UID/GID to match K8s securityContext expectations
+RUN addgroup -g 101 -S onap && adduser -u 101 -S -G onap -h /home/onap onap
+ENV HOME=/home/onap
# Needed for pycurl SSL backend selection
ENV PYCURL_SSL_LIBRARY=openssl
ARG JETTY_FOLDER=/app/jetty
# Create onap user/group, install dependencies, and create Jetty folder
-RUN addgroup -S onap && \
- adduser -S -G onap -h /home/onap onap && \
+RUN addgroup -g 101 -S onap && \
+ adduser -u 1000 -S -G onap -h /home/onap onap && \
apk add --no-cache curl jq && \
mkdir -p $JETTY_FOLDER && chown onap:onap $JETTY_FOLDER
+ENV HOME=/home/onap
ENV JETTY_HOME=$JETTY_FOLDER
ENV JETTY_BASE=$JETTY_FOLDER