michaeljmarshall commented on pull request #8242: URL: https://github.com/apache/pulsar/pull/8242#issuecomment-735983033
I just opened https://github.com/apache/pulsar/issues/8751 to request that the pulsar `Dockerfile` is fixed to ensure that pulsar containers are not given the root user, as they do not need to run as root. I am not familiar with OpenShift, so I cannot speak to a solution for this specific problem, but I do think it is a security best practice to give applications the least necessary permission to run. As such, I do not think this PR should be merged. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
