feature request: temporarily switch to user ROOT using xml configuration

[jochenr]

Component

Kubernetes Maven Plugin

Is your enhancement related to a problem? Please describe

I like to build container (advanced) images without using a Dockerfile, so that I can have the whole configuration in my maven pom.xml.

Describe the solution you'd like

As discussed in #2703
It would be great if I can switch USERs several times during a build of a container image.

In a Dockerfile I can do something like this to switch to the root user for building the image and swuícth back at the end

FROM registry.access.redhat.com/ubi8/....

USER root

COPY .....

RUN ....

USER 185

This seems to be unpossible when using the XML configuration in a maven pom.
Using the tag I can get the "USER 185" line at the end of the genberated dockerfile

<image>
    ....
    <build>
        ...
        <user>185</user>
    </build>
</image>

To use ROOT for executing a RUN command something like this would be good:

<runCmds>
    <runCmd>
        <user>root</user>
        <run>update-ca-trust</run>
    </runCmd>
</runCmds>

?

already has a subtag,
So for me it makes sense that the s within also get a way to specify a user.

Describe alternatives you've considered

As an alternative I can use a Dockefile
But I don't want to do that, because some images I have to use Dockerfiles while for others I can stay within the maven pom....

Additional context

No response

[Pushkal-G]

Hi @jochenr, How much effort is required for this? If I can take this up and start working on?

[jochenr]

Hello @Pushkal-G ,

sorry, cannot estimate how much effort it takes, since I don't know the codebase of JKube.
I never worked on it myself, I'm just a user.

Best regards,
Jochen

[manusa]

Hi @jochenr, How much effort is required for this? If I can take this up and start working on?

A very deep and important refactor. It's not a trivial task and will probably involve architectural decisions and breaking changes.

[Pushkal-G]

So, what do you suggest, should i work on this?

[manusa]

So, what do you suggest, should i work on this?

this is definitely not a good-first-issue or a help-wanted issue.

In any case, feel free to suggest an approach or even a PR with a working PoC for further consideration.

[rohanKanojia]

I think this pull request might be related to this issue fabric8io/docker-maven-plugin#1772 . A docker-maven-plugin contributor has created this pull request to allow specifying USER in Dockerfile with RUN commands