Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run Glance services with glance user/group when possible #609

Merged

Conversation

fmount
Copy link
Contributor

@fmount fmount commented Aug 19, 2024

This patch improves the scc related to Glance services: it updates the code to use Glance user/group provided by kolla in both dbsync and cronjob(s), and the same tuning is applied to Pod/containers that don't require special privileges.

Jira: https://issues.redhat.com/browse/OSPRH-10040
Jira: https://issues.redhat.com/browse/OSPRH-10145

@fmount fmount requested review from abays and konan-abhi August 19, 2024 06:23
@openshift-ci openshift-ci bot requested a review from stuggi August 19, 2024 06:23
This patch improves the scc related to Glance services: it updates the
code to use glance user/group provided by kolla in both dbsync and
cronjob(s), and the same tuning is applied to Pods that don't require
special privileges.

Signed-off-by: Francesco Pantano <[email protected]>
@fmount
Copy link
Contributor Author

fmount commented Aug 19, 2024

@abays @konan-abhi still working on moving both httpd and api away from root user: it might require a follow up patch (or commit within this patch) to make the review easier. Let's see a CI run in the first place.

Copy link
Contributor

openshift-ci bot commented Aug 19, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fmount, konan-abhi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot openshift-merge-bot bot merged commit c05e854 into openstack-k8s-operators:main Aug 19, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants