You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2020/08/31 18:52:55 UTC

[GitHub] [airflow] potiuk commented on a change in pull request #10600: updating redis to bitnami distribution due to security limitation

potiuk commented on a change in pull request #10600:
URL: https://github.com/apache/airflow/pull/10600#discussion_r480323012



##########
File path: chart/values.yaml
##########
@@ -79,8 +79,8 @@ images:
     tag: 0.11.0
     pullPolicy: IfNotPresent
   redis:
-    repository: redis
-    tag: 6-buster
+    repository: bitnami/redis

Review comment:
       The official docker image already runs as non-root user by default (50000 - Airflow) - precisely as explained by @gardnerdev. 
   
   It also has another feature - the image is OpenShift compatible: https://github.com/apache/airflow/issues/9248 which means that it can essentially run as "random" user but the user has to belong to "root" group (this is how OpenShift runs the images).
   
   I think if the bitnami image is also OpenShift compatible - I'd definitely welcome that!




----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org