Merge pull request #87 from K-Phoen/distroless

Use gcr.io/distroless/static:nonroot as base docker image

README.md

@@ -120,7 +120,7 @@ docker run --rm -it -v $(pwd):/workspace kphoen/dark-converter:latest convert-ya
 ## Converting Grafana JSON dashboard to a Kubernetes manifest
 
 ```sh
-docker run --rm -it -v $(pwd):/workspace kphoen/dark-converter:latest convert-k8s-manifest -i dashboard.json -o converted-dashboard.yaml --folder Dark --namespace monitoring test-dashboard
+docker run --rm -it -u $(id -u):$(id -g) -v $(pwd):/workspace kphoen/dark-converter:latest convert-k8s-manifest -i dashboard.json -o converted-dashboard.yaml --folder Dark --namespace monitoring test-dashboard
 ```
 
 ## Integrating with ArgoCD

build/Dockerfile-controller

@@ -8,11 +8,12 @@ COPY . /app
 
 RUN make controller_build
 
-# Run
+# Use distroless as minimal base image to package the manager binary
+# Refer to https://github.com/GoogleContainerTools/distroless for more details
+FROM gcr.io/distroless/static:nonroot
 
-FROM alpine:3.14
 ENTRYPOINT ["/app/dark-controller"]
 WORKDIR /app
-RUN apk --update --no-cache add ca-certificates=20191127-r5 && update-ca-certificates
+USER 65532:65532
 
 COPY --from=build /app/dark-controller /app/dark-controller

build/Dockerfile-converter

@@ -8,11 +8,12 @@ COPY . /app
 
 RUN make converter_build
 
-# Run
+# Use distroless as minimal base image to package the manager binary
+# Refer to https://github.com/GoogleContainerTools/distroless for more details
+FROM gcr.io/distroless/static:nonroot
 
-FROM alpine:3.14
 ENTRYPOINT ["/app/dark-converter"]
 WORKDIR /workspace
-RUN apk --update --no-cache add ca-certificates=20191127-r5 && update-ca-certificates
+USER 65532:65532
 
 COPY --from=build /app/dark-converter /app/dark-converter