Merge pull request #3476 from aledbf/fix-docker-permissions

Fix nginx directory permissions
This commit is contained in:
k8s-ci-robot 2018-11-27 23:09:12 -08:00 committed by GitHub
commit 7b79341670
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -22,13 +22,12 @@ RUN clean-install \
diffutils \ diffutils \
libcap2-bin libcap2-bin
COPY . / COPY --chown=www-data:www-data . /
# Fix permission during the build to avoid issues at runtime # Fix permission during the build to avoid issues at runtime
# with volumes (custom templates) # with volumes (custom templates)
RUN bash -eu -c ' \ RUN bash -eu -c ' \
writeDirs=( \ writeDirs=( \
/etc/nginx/template \
/etc/ingress-controller/ssl \ /etc/ingress-controller/ssl \
/etc/ingress-controller/auth \ /etc/ingress-controller/auth \
/var/log \ /var/log \
@ -38,9 +37,7 @@ RUN bash -eu -c ' \
for dir in "${writeDirs[@]}"; do \ for dir in "${writeDirs[@]}"; do \
mkdir -p ${dir}; \ mkdir -p ${dir}; \
chown -R www-data.www-data ${dir}; \ chown -R www-data.www-data ${dir}; \
done' \ done'
&& chown www-data.www-data /etc/nginx/nginx.conf \
&& chown www-data.www-data /etc/nginx/opentracing.json
RUN setcap cap_net_bind_service=+ep /nginx-ingress-controller \ RUN setcap cap_net_bind_service=+ep /nginx-ingress-controller \
&& setcap -v cap_net_bind_service=+ep /nginx-ingress-controller && setcap -v cap_net_bind_service=+ep /nginx-ingress-controller