Hey!
I'm seeing a weird behavior since Friday. We use the USER command in our Dockerfile to specify the user to run the container, but Cloud Run start our containers as root instead. But it does it only sometimes. Sometimes it honors the user and starts the container normally. Even within a single deployed revision different container instances are started with different users.
This started on Friday Nov 8th 2024 and is still ongoing. The documentation for the USER command states that ENTRYPOINT/CMD will run under the specified user when container is started. And we had no problems like that before Friday. I tried known-good code from two weeks ago and it exhibited the same behavior.
We deploy using Terraform with resource v1 (no v2 in the name). I tried using both Container Registry and Artifact Registry for images.
I see there was a release of Cloud Run near when it started, but the release notes are unrelated. Have I missed some kind of deprecation message? We have a mitigation in place, but since it flip-flops between different users within a single deployed revision, it seems more like a bug on Cloud Run side...
LinkedIn
Twitter
