aws-es-proxy icon indicating copy to clipboard operation
aws-es-proxy copied to clipboard

Update the Dockerfile

Open guusvw opened this issue 6 years ago • 3 comments

  • create extra user & use it

Signed-off-by: Guus van Weelden [email protected]

guusvw avatar Sep 13 '19 07:09 guusvw

Similar (#54) was merged in branch v1.0-dev. It's missing the additional user part, but I'm wondering if this is actually required. The docker container should be already running as a regular user, so can you elaborate more on why you think a regular user in the container is required? If there's something I'm missing, I'm more than happy to have it included before releasing v1.0.

abutaha avatar Oct 29 '19 02:10 abutaha

It's missing the additional user part, but I'm wondering if this is actually required. The docker container should be already running as a regular user, so can you elaborate more on why you think a regular user in the container is required? If there's something I'm missing, I'm more than happy to have it included before releasing v1.0.

Hi - this is best practices in a Kubernetes cluster, a PodSecurityPolicy named "MustRunAsNonRoot" was created just for that.

razvan-moj-zz avatar Nov 11 '19 13:11 razvan-moj-zz

@abutaha , so when trying to export the logs to Elastic search we are getting this issue, wondering is something from binary or docker image is causing this ?

2020-08-25 07:44:14 +0000 [info]: gem 'fluentd' version '1.4.2' 2020-08-25 07:44:14 +0000 [info]: adding match pattern="fluent." type="null" 2020-08-25 07:44:14 +0000 [info]: adding filter pattern="kubernetes." type="kubernetes_metadata" 2020-08-25 07:44:14 +0000 [info]: adding match pattern="**" type="elasticsearch" 2020-08-25 07:44:16 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:44:20 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:44:28 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:44:44 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:45:16 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:46:20 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED) 2020-08-25 07:48:28 +0000 [warn]: #0 [out_es] Could not communicate to Elasticsearch, resetting connection and trying again. Connection refused - connect(2) for 10.0.1.122:9200 (Errno::ECONNREFUSED)

krish143434 avatar Aug 25 '20 07:08 krish143434