Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate runAsUser deployment errors on non-OpenShift clusters #1134

Open
bdunne opened this issue Jul 25, 2024 · 1 comment
Open

Investigate runAsUser deployment errors on non-OpenShift clusters #1134

bdunne opened this issue Jul 25, 2024 · 1 comment

Comments

@bdunne
Copy link
Member

bdunne commented Jul 25, 2024

Discussed in https://github.com/orgs/ManageIQ/discussions/22449

Originally posted by stevenrenaud April 7, 2023
Hello,
Good job with ManageIQ.

I struggle a little while deploying in Azure AKS with operator.
Is there any way to add the SecurityOption : runAsUser: XXXX through the Operator ?

I can't achieve to deploy without.
If i remove operator and i apply the config in every deployment everything is OK.

someting like this :
` securityContext:

        capabilities:

          drop:

            - ALL

        privileged: false

        runAsUser: 65532

        runAsNonRoot: true

        allowPrivilegeEscalation: false

`

@bdunne bdunne transferred this issue from ManageIQ/manageiq Jul 25, 2024
@CCoupel
Copy link

CCoupel commented Aug 7, 2024

Hi all, Thanks for the great job on this great solution.
I am facing an equivalent issue on my k8s cluster (rancher)
While deploying NAJDORF or OPARIN, all pods runs well: security context is set to {} in the deployment.
But, with PETROSIAN and other recent ones, httpd and orchestrator failed with "container has runAsNonRoot and image will run as root". I can see that in the deployment, the securityContxt set the runAsNonRoot to true.

This deployment is set during the reconciling from the operator, so, how can we solve this? Does any one succeed in deploying it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants