Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow configuration of Container Security Context in Helm chart #1366

Closed
djessich opened this issue Dec 9, 2022 · 3 comments
Closed

Allow configuration of Container Security Context in Helm chart #1366

djessich opened this issue Dec 9, 2022 · 3 comments
Assignees

Comments

@djessich
Copy link

djessich commented Dec 9, 2022

Is your feature request related to a problem? Please describe.
I cannot set the security context for the created containers. It is only allowed to set the security context of the created pods.

Describe the solution you'd like
Please implement security context configuration for the created containers additionally to the security context of the created pods.

Describe alternatives you've considered
Currently there are no alternatives available.

Additional Information
It should be allowed to set the security context for the created containers to prevent privilege escalation and to configure read only root filesystem. Both options are a Kubernetes Security best practice.

@dvaldivia
Copy link
Collaborator

This is a controversial one since adding support for this makes the minimal version of Kubernetes to be 1.22 I believe since that's when Container Security Context was added, with the release of kubernetes 1.26 we are now only supporting down to 1.21 so when 1.22 is our floor we will add support for Container Security Context.

Unless we find a backwards compatible approach to add this, we cannot add it, but we will look into it.

@allanrogerr
Copy link
Contributor

Fixed in #1372. Please see for comments.

@dilverse
Copy link
Member

PR #1372 fixes this issue, feel free to try it out. Closing this issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants