To ensure images are not running as root in kubernetes clusters we need the images to have numeric UIDs rather then user names set in the "USER" instructions (via Dockerfile).
With https://gerrit.wikimedia.org/r/c/blubber/+/660771 merged and deployed, blubber(oid) will take care of that automatically, but a rebuild (and deploy to kubernetes) is needed for images build <= 2021-02-03.
Snapshot as of 2021-02-09:
- blubber:2021-02-04-191903-production
- mediawiki-services-apertium:2020-12-09-115733-production ContentTranslation @KartikMistry
- mediawiki-services-chromium-render:2021-02-02-122014-production Proton @Jgiannelos @MSantos
- mediawiki-services-citoid:2020-11-11-134957-production Citoid @Mvolz
- mediawiki-services-cxserver:2021-01-12-095820-production CX-cxserver @Nikerabbit
- mediawiki-services-kask:v1.0.5 Cassandra @hnowlan
- mediawiki-services-kask:v1.0.6 Cassandra @hnowlan
- mediawiki-services-mathoid:2020-11-10-205043-production Mathoid @Physikerwelt
- mediawiki-services-mobileapps:2021-02-01-143328-production Page Content Service @Jgiannelos @MSantos
- mediawiki-services-push-notifications:2021-02-03-070119-publish Push-Notification-Service @Jgiannelos @MSantos
- mediawiki-services-wikifeeds:2020-12-21-180823-production Wikifeeds @Jgiannelos @MSantos
- mediawiki-services-zotero:2020-10-23-132454-production Citoid @Mvolz
- research-mwaddlink:2021-01-26-193929-production Add-Link @kostajh
- wikibase-termbox:2020-01-03-160726-production Wikidata-Termbox @noarave
- eventgate-wikimedia:2021-01-25-183848-production Event-Platform Value Stream @Ottomata
- mediawiki-services-change-propagation:v0.10.2 ChangeProp @hnowlan
- mediawiki-services-change-propagation:v0.10.4 ChangeProp @hnowlan
- mediawiki-services-eventstreams:2020-12-02-204016-production Event-Platform Value Stream @Ottomata
- mediawiki-services-recommendation-api:2020-05-03-212505-production Recommendation-API @bmansurov
- mediawiki-services-similar-users:2021-01-22-111609-production @hnowlan
If I tagged you, your project or team here, I figured you might be maintaining one of the images above. Please trigger a rebuild and deploy wherever you can and/or get back to me with questions. Feel free so unsubscribe/correct me if I made a mistake!