mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
Ashutosh Narkar
eade10ae0e
All published OPA images now run with a non-root uid/gid. The uid:gid is set to 1000:1000 for all images. As a result there is no longer a need for the --rootless image variant hence it will not be published as part of future releases. This change is in line with container security best practices. OPA can still be run with root privileges by explicitly setting the user, either with the --user argument for docker run, or by specifying the securityContext in the Kubernetes Pod specification. Fixes: #4295 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
20 lines
468 B
Go
20 lines
468 B
Go
// Copyright 2016 The OPA Authors. All rights reserved.
|
|
// Use of this source code is governed by an Apache2
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"os"
|
|
"path"
|
|
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
// RootCommand is the base CLI command that all subcommands are added to.
|
|
var RootCommand = &cobra.Command{
|
|
Use: path.Base(os.Args[0]),
|
|
Short: "Open Policy Agent (OPA)",
|
|
Long: "An open source project to policy-enable your service.",
|
|
}
|