Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Otel-Operator] Target Allocator is not running as nonroot #3378

Closed
toporek3112 opened this issue Oct 22, 2024 · 2 comments · Fixed by #3385
Closed

[Otel-Operator] Target Allocator is not running as nonroot #3378

toporek3112 opened this issue Oct 22, 2024 · 2 comments · Fixed by #3385

Comments

@toporek3112
Copy link

Component(s)

target allocator

Describe the issue you're reporting

When testing the otel-operator setup on an RKE cluster I stumbled upon Error: container has runAsNonRoot and image will run as root (pod: "otel-targetallocator-78cd5444fc-f5fqh_monitoring(1207-4994-9ce5-fb97246690a4)", container: ta-container)

otel-operator helm chart values snipped:

                    image:
                      repository: ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator
                      tag: 0.108.0
                    collectorImage:
                      repository: "otel/opentelemetry-collector-contrib"
                      tag: 0.108.0
                    targetAllocatorImage:
                      repository: ghcr.io/open-telemetry/opentelemetry-operator/target-allocator
                      tag: 0.108.0

If this is intended I will use a custom image. Please let me know.

@swiatekm
Copy link
Contributor

The target allocator docker image does indeed run it as root, but I don't think that's actually necessary. @jaronoff97 @pavolloffay do you know why this is? Looks like it was set in #354, where the target allocator was originally added, and I don't see any comments about it there. The operator image uses a non-root user.

@jaronoff97
Copy link
Contributor

i think this can probably be changed safely, im not sure why this was the case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants