Security
- Container image now runs as a non-root user (UID 1000): The published Docker image previously ran as
root, so Kubernetes deployments using therunAsNonRoot: truepod security context were rejected at admission. The image now sets a numericUSER 1000(thenodeaccount already present in thenode:lts-alpinebase), which satisfiesrunAsNonRootwithout an additionalrunAsUseroverride and reduces the container's blast radius. No configuration change is required. (Reported by @nogweii, #122)
Full Changelog: v1.7.1...v1.7.2