From a79d82dd5aeb63276468c3b39c9835d1a715c405 Mon Sep 17 00:00:00 2001
From: Jonathan Pulsifer <jonathan@pulsifer.ca>
Date: Mon, 19 Jun 2017 10:20:22 -0400
Subject: [PATCH] nginx-ingress-controller: update Dockerfile for dropped
 privileges in nginx-slim

---
 controllers/nginx/rootfs/Dockerfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/controllers/nginx/rootfs/Dockerfile b/controllers/nginx/rootfs/Dockerfile
index 23b48f017..7b2a971d6 100644
--- a/controllers/nginx/rootfs/Dockerfile
+++ b/controllers/nginx/rootfs/Dockerfile
@@ -12,8 +12,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM gcr.io/google_containers/nginx-slim-amd64:0.18
+FROM gcr.io/google_containers/nginx-slim-amd64:0.19
 
+USER root
 RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install -y \
   diffutils \
   --no-install-recommends \
@@ -26,4 +27,5 @@ ENTRYPOINT ["/sbin/tini", "--"]
 
 COPY . /
 
+USER nginx
 CMD ["/nginx-ingress-controller"]