Allow reading Elasticsearch certs in Wolfi image (#732)

The config/certs directory of Elasticsearch is not readable by other
users and groups. This work in the public image, which uses the root
user, but the Wolfi image does not. Using the same user id fixes the
problem.
This commit is contained in:
Quentin Pradet 2024-10-09 15:37:05 +04:00 committed by GitHub
parent 06b65e211e
commit 5dabe9c099
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -26,6 +26,10 @@ WORKDIR /eland
ENV VIRTUAL_ENV=/eland/venv ENV VIRTUAL_ENV=/eland/venv
ENV PATH="$VIRTUAL_ENV/bin:$PATH" ENV PATH="$VIRTUAL_ENV/bin:$PATH"
# Use the same `USER` instruction as Elasticsearch to make sure Eland can read
# a volume with Elasticsearch data in it. This is useful for --ca-cert.
USER 1000:0
COPY --from=builder /eland /eland COPY --from=builder /eland /eland
# The eland_import_hub_model script is intended to be executed by a shell, # The eland_import_hub_model script is intended to be executed by a shell,