Use non-root redis image (#457)

equinor · May 30, 2021 · a5680db · a5680db
1 parent 01146b5
commit a5680db
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -23,6 +23,8 @@ button to `WebvizPluginABC`.
 ### Fixed
 - [#440](https://github.com/equinor/webviz-config/pull/440) - Fixed setting of global 
 log level for webviz application.
+- [#457](https://github.com/equinor/webviz-config/pull/457) - Use non-root `redis`
+Docker image in generated Radix setup.
 
 ## [0.3.1] - 2021-04-29
 

diff --git a/webviz_config/_deployment/radix.py b/webviz_config/_deployment/radix.py
@@ -30,6 +30,9 @@ def create_radix_config(
     template = template_environment.get_template("radixconfig.yaml.jinja2")
 
     (build_directory / "radixconfig.yaml").write_text(template.render(settings))
+    (build_directory / "auth-state.Dockerfile").write_text(
+        "FROM redis:alpine\nUSER 999"
+    )
 
 
 def website_online(url: str) -> bool:

diff --git a/webviz_config/templates/radixconfig.yaml.jinja2 b/webviz_config/templates/radixconfig.yaml.jinja2
@@ -37,7 +37,7 @@ spec:
             OAUTH2_PROXY_UPSTREAMS: "http://main:5000" # Where authenticated requests are routed to: the web application
 
     - name: auth-state
-      image: redis:5-alpine
+      dockerfileName: auth-state.Dockerfile
       ports:
         - name: redis
           port: 6379