[jira] [Created] (SUBMARINE-1179) Add PodSecurityPolicies/SecurityContextConstraints for submarine

["cdmikechen (Jira)" <ji...@apache.org>]

cdmikechen created SUBMARINE-1179:
-------------------------------------

             Summary: Add PodSecurityPolicies/SecurityContextConstraints for submarine
                 Key: SUBMARINE-1179
                 URL: https://issues.apache.org/jira/browse/SUBMARINE-1179
             Project: Apache Submarine
          Issue Type: Bug
          Components: Cloud-native Deployment
            Reporter: cdmikechen


Database and minio need user uid 999 / 0 to run container. Sometimes, K8s's security policy prohibits too small uid values.
We need to add PodSecurityPolicies(k8s) or SecurityContextConstraints(openshift) to let pod run as a user with specified uid. e.g.

{code}
securityContext:
    runAsUser: 999
{code}




--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@submarine.apache.org
For additional commands, e-mail: dev-help@submarine.apache.org