You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Philippe Gagnon (JIRA)" <ji...@apache.org> on 2018/10/30 12:17:00 UTC

[jira] [Created] (AIRFLOW-3274) Add run_as_user and fs_group security context options for KubernetesExecutor

Philippe Gagnon created AIRFLOW-3274:
----------------------------------------

             Summary: Add run_as_user and fs_group security context options for KubernetesExecutor
                 Key: AIRFLOW-3274
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-3274
             Project: Apache Airflow
          Issue Type: Improvement
          Components: kubernetes, scheduler
            Reporter: Philippe Gagnon


At this time it is not possible to add `run_as_user` or `fs_group` securityContext options to worker pods when using KubernetesExecutor. This makes it harder to use KubernetesExecutor on clusters with pod security policies which do not allow containers to run as root.

I have already implemented this functionality for my internal use and will propose a PR soon.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)