[GitHub] [druid] hosswald commented on issue #10777: Druid Docker-Image not compatible with OpenShift default SecurityContextConstraint (SCC)

[GitBox <gi...@apache.org>]

hosswald commented on issue #10777:
URL: https://github.com/apache/druid/issues/10777#issuecomment-1209135705

   @mstein11 @FrankChen021 @utsavjha I'm still experiencing exactly this problem with the helm chart at https://github.com/apache/druid/tree/master/helm/druid (6b0b1d7af317d1a6b219cf1213139abf1607eaa0).
   It has securityContext.mountPath: /opt/druid/var/druid/ and fsGroup: 1000, but I'm getting:
   CreateContainerConfigError `Error: container has runAsNonRoot and image has non-numeric user (druid), cannot verify user is non-root` for historical and middleManager, and logs
   ```
   mkdir: can't create directory 'var/tmp': Permission denied
   mkdir: can't create directory 'var/druid/': Permission denied
   ```
   for the other services.
   If I override the securityContext in my own values.yaml
   ```
   druid:
     historical:
       securityContext: false
     middleManager:
       securityContext: false
   ```
   historical and middleManager start, but have the Permission denied error as well.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org