[GitHub] [pulsar] merlimat opened a new pull request #10861: Revert "[Issue 8751] Update Dockerfile for Pulsar and Dashboard to Cr…

[GitBox <gi...@apache.org>]

merlimat opened a new pull request #10861:
URL: https://github.com/apache/pulsar/pull/10861


   …eate and Use pulsar User (nonroot user) (#8796)"
   
   This reverts commit 4264a67a84d9a9f4a49cebc591c46b252dcf4e45.
   
   ### Motivation
   
   The change https://github.com/apache/pulsar/pull/8796 has broken the Pulsar
   Functions running on Kubernetes.
   
   The Pulsar Functions Kubernetes runtime generates a secret and mounts it
   using mode `256`. That means the secret is only able to read by the user.
   The StatefulSet created by Kubernetes runtime mounts the secrets under the
   `root` user. Hence only the root user is able to read the secret. This
   results in any functions submitted will fail to read the authentication
   information.
   
   Because all the Kubernetes resources generated by the Kubernetes runtime
   are hardcoded. There is no easy way to change the security context for the
   function statefulsets. 
   
   Let's revert this change for 2.8.0, until we can address the issues in the Kubernetes runtime.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] codelipenghui merged pull request #10861: Revert "[Issue 8751] Update Dockerfile for Pulsar and Dashboard to Cr…

[GitBox <gi...@apache.org>]

codelipenghui merged pull request #10861:
URL: https://github.com/apache/pulsar/pull/10861


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org