You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2022/11/11 00:59:41 UTC

[GitHub] [airflow] NipunaPrashan opened a new issue, #27612: [Chart] Container security context is not defined

NipunaPrashan opened a new issue, #27612:
URL: https://github.com/apache/airflow/issues/27612

   ### Apache Airflow version
   
   main (development)
   
   ### What happened
   
   Container security context is not defined to change through values yaml. This is a **security** issue for containers. 
   
   https://github.com/apache/airflow/blob/main/chart/templates/triggerer/triggerer-deployment.yaml
   
   
   
   ### What you think should happen instead
   
   Include securitContext block under containers section and allow to change from values yaml.
   
   ### How to reproduce
   
   Run azure security compliance checks to identify the issues with the containers.
   `Kubernetes clusters should not allow container privilege escalation `
   
   ### Operating System
   
   N/A
   
   ### Versions of Apache Airflow Providers
   
   _No response_
   
   ### Deployment
   
   Official Apache Airflow Helm Chart
   
   ### Deployment details
   
   _No response_
   
   ### Anything else
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] jedcunningham closed issue #27612: [Chart] Container security context is not defined

Posted by "jedcunningham (via GitHub)" <gi...@apache.org>.
jedcunningham closed issue #27612: [Chart] Container security context is not defined
URL: https://github.com/apache/airflow/issues/27612


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] potiuk commented on issue #27612: [Chart] Container security context is not defined

Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #27612:
URL: https://github.com/apache/airflow/issues/27612#issuecomment-1509268008

   @mikaeld - if you want #24588 to be merged, make sure it passes the tests first - author can do it if pinged, or you can take over. Passing tests is the prerequisite we look at it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] jedcunningham commented on issue #27612: [Chart] Container security context is not defined

Posted by GitBox <gi...@apache.org>.
jedcunningham commented on issue #27612:
URL: https://github.com/apache/airflow/issues/27612#issuecomment-1311116563

   This is coming (soon!) in #24588.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] boring-cyborg[bot] commented on issue #27612: [Chart] Container security context is not defined

Posted by GitBox <gi...@apache.org>.
boring-cyborg[bot] commented on issue #27612:
URL: https://github.com/apache/airflow/issues/27612#issuecomment-1311096858

   Thanks for opening your first issue here! Be sure to follow the issue template!
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] mikaeld commented on issue #27612: [Chart] Container security context is not defined

Posted by "mikaeld (via GitHub)" <gi...@apache.org>.
mikaeld commented on issue #27612:
URL: https://github.com/apache/airflow/issues/27612#issuecomment-1490400359

   Hey! Any news on getting https://github.com/apache/airflow/pull/24588 in `1.9.0`? I was about to start implementing this exact feature when I found this PR


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org