You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Maybe it makes sense for us to apply a general Pod security context around everything, and then have optional container security contexts for each container within the Pod:
Except for cases like this where we seem to know that a container will not run under the general Pod context, or at least on some common and supported k8s/OCP versions it won't, then we can provide a default for that particular container.
After saying all that, I see we do have separate container security contexts:
After saying all that, I see we do have separate container security contexts:
https://github.com/cryostatio/cryostat-helm?tab=readme-ov-file#jfr-data-source-container
But the new storage and db containers don't have their own. They are mistakenly reusing the
core
context.Originally posted by @andrewazores in #133 (comment)
The text was updated successfully, but these errors were encountered: