-
Notifications
You must be signed in to change notification settings - Fork 263
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Service export should handle securityContext field #1788
Comments
I want to work on this issue, can you please tell from where i can start? |
@taniaduggal, that is great! Before we start, I would like to discuss this update's background briefly. I think this story is part of a larger story, where we allow user to filter out certain information when doing an export so that it can be later used in a GitOps scenario. Besides the securityContext, I can also see fields we should not export by default, e.g. the namespace. So I suggest that we make a new option flexible so that we can fine granularly specify what to include (if excluded by default) and what to included (if included by default). My suggestion would be to have an option like
or
@dsimansk what is your take on this ? (using multiple options here). @taniaduggal for starting its best to look at https://github.com/knative/client/blob/main/pkg/kn/commands/service/export.go which has all the logic for an export. This would be the place where we would evaluate that option and do the filtering. Thanks again @taniaduggal that you want to jump on the train, greatly appreciated! |
@rhuss I read you idea and you want that users can filter certain info... that good idea.
|
@Rahul-Kumar-prog I'd go with @rhuss's suggestion, the I'd go with this variant. And the valid values are predefined and listed in the help message.
|
+1 for not use options inflationary but have an easy way to extend this feature without changing the "option API surface". In addition to provide the options as a comma separated list, multiple |
I want to work on this but i am already working on knative-kafka-broker repo issue so after finishing that i would love to work on this if its ok then please let me know. |
Thanks! It's totally fine if you want to jump on this issue later, and we can then work on a PR as soon as you have something to share. |
+1 @rhuss Assigning to you @Rahul-Kumar-prog to indicate it's being looked at some point. It's still ~2 months until next release v1.12. There's no time pressure right now. Feel free to proceed at your convenience. /assign @Rahul-Kumar-prog |
I would like to take this one |
Feel free to start working or you can assign it to yourself. |
/assign |
Feature request
With more Pod Security Standards enabled clusters we need to address the
securityContext
being present in PodSpec and Containers definitions. Since the two cluster with different PSS config might not be compatible for the same export.I'd suggest that we remove it in default behavior and add a flag to include it optionally
UI Example
/kind good-first-issue
/kind proposal
/cc @rhuss @mvinkler
The text was updated successfully, but these errors were encountered: