From de739eee6989e22cdf34f3b1ddfe5058f4b5c273 Mon Sep 17 00:00:00 2001 From: Shubham Date: Mon, 11 Jun 2018 17:23:51 +0530 Subject: [PATCH] Create configuration directories in /ambassador/ instead of /etc/ This commit modifies the directories being created in the Dockerfile to be created under /ambassador/ instead of in /etc/. This lets ambassador to be run as a non-root user with no access to /etc/. Fix #457 --- ambassador/Dockerfile | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/ambassador/Dockerfile b/ambassador/Dockerfile index 557a8e17ccc..8adab0031da 100644 --- a/ambassador/Dockerfile +++ b/ambassador/Dockerfile @@ -43,12 +43,13 @@ COPY ./ ambassador RUN cd ambassador && python3 setup.py --quiet install RUN rm -rf ./ambassador -# MKDIR an empty /etc/ambassador-config. You can dump a configmap over this with no -# trouble, or you can let annotations do the right thing. -RUN mkdir /etc/ambassador-config +# MKDIR an empty /application/ambassador-config. You can dump a +# configmap over this with no trouble, or you can let +# annotations do the right thing +RUN mkdir ambassador-config # COPY in a default config for use with --demo. -COPY default-config/ /etc/ambassador-demo-config +COPY default-config/ ambassador-demo-config # COPY the entrypoint script and make it runnable. COPY kubewatch.py .