Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix: Set podsecuritycontext values for openshift to supplemental group id #3228

Merged
merged 5 commits into from
Jul 27, 2022

Conversation

shreddedbacon
Copy link
Member

@shreddedbacon shreddedbacon commented Jul 26, 2022

Checklist

  • Affected Issues have been mentioned in the Closing issues section
  • Documentation has been written/updated
  • PR title is ready for inclusion in changelog

As #3227 describes, setting fsGroup: 0 in some of our templates does not work in Openshift.

  • solr
  • elasticsearch
  • mariadb-single
  • mongodb-single
  • rabbitmq
  • postgres-single

This sets the podsecuritycontext fsGroup for Openshift to the supplemental group id from the namespace annotations.

Closing issues

closes #3227

@shreddedbacon shreddedbacon changed the title chore: unset podsecuritycontext values in openshift unset podsecuritycontext values in openshift Jul 26, 2022
@shreddedbacon shreddedbacon requested a review from Schnitzel July 26, 2022 08:06
@shreddedbacon
Copy link
Member Author

We ran this on a ROSA cluster in a single project using a custom build with the image from this PR. The build ran through fine and provisioned all the deployments using the group ID. Checking other deployments in other namespaces, they all have the supplemental group, and then checking the deployments in this project they look identical in terms of security context settings.

@shreddedbacon shreddedbacon changed the title unset podsecuritycontext values in openshift Fix: Set podsecuritycontext values for openshift to supplemental group id Jul 27, 2022
@tobybellwood tobybellwood merged commit b9fcd11 into main Jul 27, 2022
@tobybellwood tobybellwood deleted the openshift-fsgroup branch July 27, 2022 21:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OpenShift deploy errors with pods having fsGroup: 0
2 participants