[GitHub] [camel-k] gansheer opened a new pull request, #4407: feat(core): Change Operator and Builder Pod user as non root 1000

["gansheer (via GitHub)" <gi...@apache.org>]

gansheer opened a new pull request, #4407:
URL: https://github.com/apache/camel-k/pull/4407

   ## Motivation
   
   Since the new builder pod is configured to run with non root user and a persistent volume has been created there have been some permission/copy issues I fixed while working on #4297. There permissions can be fixed two different way on kubernetes security : extend root user or extend non-root user. 
   
   Since it make more sense to try to avoid root (as a general rule) and some Dockerfile already use user with ID 1000 (same for group ID), I made some first modifications to try to have more non-root user for operator and builder pods.
   
   There are also some warning on integration containers, but they will be dealt with #4297.
   
   ## Description
   
   * Dockerfile : sets the group for folders used for dependencies is 1000
   * Force 1000 as User ID/ Group ID/FS Group ID to be coherent with the one declared in Dockerfile
   * Use 1000 on volume to ensure dependencies from camel-k-runtime can be added
   
   <!-- Description -->
   
   
   
   
   <!--
   Enter your extended release note in the below block. If the PR requires
   additional action from users switching to the new release, include the string
   "action required". If no release note is required, write "NONE". 
   
   You can (optionally) mark this PR with labels "kind/bug" or "kind/feature" to make sure
   the text is added to the right section of the release notes. 
   -->
   
   **Release Note**
   ```release-note
   Extend usage of non-root user (1000) on operator and builder pods
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [camel-k] squakez commented on pull request #4407: feat(core): Change Operator and Builder Pod user as non root 1000

["squakez (via GitHub)" <gi...@apache.org>]

squakez commented on PR #4407:
URL: https://github.com/apache/camel-k/pull/4407#issuecomment-1560609665

   Check failure because #4408 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [camel-k] squakez merged pull request #4407: feat(core): Change Operator and Builder Pod user as non root 1000

["squakez (via GitHub)" <gi...@apache.org>]

squakez merged PR #4407:
URL: https://github.com/apache/camel-k/pull/4407


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org