修复只读根文件系统下的 ServiceAccount token 挂载 #8

Merged
panxiao81 merged 1 commits from fix/serviceaccount-mountpoint into main 2026-09-16 15:20:02 +00:00
Showing only changes of commit 3ec528623a - Show all commits
+3 -1
View File
@@ -7,7 +7,9 @@ COPY src ./src
RUN python -m venv /venv && /venv/bin/pip install --no-cache-dir .
FROM python:3.12.11-alpine3.22
RUN addgroup -S -g 65532 runner && adduser -S -D -H -u 65532 -G runner runner
RUN addgroup -S -g 65532 runner \
&& adduser -S -D -H -u 65532 -G runner runner \
&& install -d -o 65532 -g 65532 /var/run/secrets/kubernetes.io/serviceaccount
COPY --from=build /venv /venv
COPY --from=spire /opt/spire/bin/spire-agent /opt/spire/bin/spire-agent
USER 65532:65532