Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Init containers and sidecar containers are missing container security context #1606

Closed
xhejtman opened this issue May 14, 2023 · 1 comment · Fixed by #1651
Closed

Init containers and sidecar containers are missing container security context #1606

xhejtman opened this issue May 14, 2023 · 1 comment · Fixed by #1651

Comments

@xhejtman
Copy link

As of the latest git (5.0.4 and later), tenant initcontainer (validate-arguments) and sidecar container (sidecar) are missing container security context from tenant pool (security context is empty).

This is problem for running in kubernetes 1.25+ that have PSA, minio is unable to run in a restricted namespace as the restricted namespace requires to set at least:

allowPrivilegeEscalation: false
capabilities:
  drop:
   - ALL

Patch for this is quite simple.

@hampusehh
Copy link

hampusehh commented May 26, 2023

I am having the same issue.
Currently running in a privileged namespace, but will not work long term.
It would be fantastic if this got fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants