From 3d281e952c471fff9512ac4f63ebbe902dad533c Mon Sep 17 00:00:00 2001
From: Wilson Husin <whusin@vmware.com>
Date: Thu, 18 Feb 2021 11:18:20 -0800
Subject: [PATCH] Add /tmp/results directory with nonroot ownership

Signed-off-by: Wilson Husin <whusin@vmware.com>
---
 cluster/images/conformance/Dockerfile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/cluster/images/conformance/Dockerfile b/cluster/images/conformance/Dockerfile
index 05ce828875e..4961ba2c180 100644
--- a/cluster/images/conformance/Dockerfile
+++ b/cluster/images/conformance/Dockerfile
@@ -15,9 +15,13 @@
 ARG BASEIMAGE
 
 FROM gcr.io/k8s-staging-build-image/debian-base:v2.1.3 as base
+RUN mkdir /tmp/results \
+ && chown 65532 /tmp/results # Distroless nonroot UID
 
 FROM ${BASEIMAGE}
 
+COPY --from=base /tmp/results /tmp
+
 # This is a dependency for `kubectl diff` tests
 COPY --from=base /usr/bin/diff /usr/local/bin/