-
Notifications
You must be signed in to change notification settings - Fork 450
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Pod securityContext for target allocator #2500
Add Pod securityContext for target allocator #2500
Conversation
Signed-off-by: Husni Alhamdani <[email protected]>
@@ -0,0 +1,16 @@ | |||
# One of 'breaking', 'deprecation', 'new_component', 'enhancement', 'bug_fix' | |||
change_type: breaking |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is an enhancement as you are adding fields here.
@@ -51,6 +51,7 @@ spec: | |||
securityContext: | |||
runAsUser: 1000 | |||
runAsGroup: 3000 | |||
fsGroup: 3000 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
i believe you need to set this in a different block for the podSecurityContext
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
updated
Signed-off-by: Husni Alhamdani <[email protected]>
cedd29b
to
9ad50fb
Compare
Signed-off-by: Husni Alhamdani <[email protected]>
@@ -56,6 +56,8 @@ spec: | |||
operator: In | |||
values: | |||
- "true" | |||
securityContext: | |||
runAsUser: 1000 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should we assert the other properties here too?
runAsGroup: 3000
fsGroup: 2000
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
added
Signed-off-by: Husni Alhamdani <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Description:
Add Pod securityContext to target allocator as it was removed in previous changes.
Link to tracking Issue:
#2495
Testing:
Added a unit and E2E test to specifically check fields unique to the Pod security context.