Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] : Cannot configure SecurityContext at container level #516

Closed
ordovicia opened this issue Jun 6, 2023 · 1 comment · Fixed by #518
Closed

[Feature] : Cannot configure SecurityContext at container level #516

ordovicia opened this issue Jun 6, 2023 · 1 comment · Fixed by #518
Assignees
Labels
enhancement New feature or request

Comments

@ordovicia
Copy link

What version of redis operator are you using?

redis-operator version: v0.14.0

Does this issue reproduce with the latest release?

Yes.

What operating system and processor architecture are you using (kubectl version)?

kubectl version Output
$ kubectl version --output=yaml
clientVersion:
  buildDate: "2023-03-15T13:40:17Z"
  compiler: gc
  gitCommit: 9e644106593f3f4aa98f8a84b23db5fa378900bd
  gitTreeState: clean
  gitVersion: v1.26.3
  goVersion: go1.19.7
  major: "1"
  minor: "26"
  platform: linux/amd64
kustomizeVersion: v4.5.7
serverVersion:
  buildDate: "2023-03-15T13:33:12Z"
  compiler: gc
  gitCommit: 9e644106593f3f4aa98f8a84b23db5fa378900bd
  gitTreeState: clean
  gitVersion: v1.26.3
  goVersion: go1.19.7
  major: "1"
  minor: "26"
  platform: linux/amd64

What did you do?

I need to configure Redis pods' SecurityContext at the container level, in addition to the pod level.
Linux capabilities, for example, can be configured at only container level (pod.spec.containers.securityContext.capabilities field).
Container-level SecurityContext configuration would allow us to make Redis pods conformant with Pod Security Standard's Restricted policy.

What did you expect to see?

Currently, we can configure Redis pods' SecurityContext at the pod level only (redis.spec.securityContext field).
I expected that I can configure the container-level SecurityContext too.

What did you see instead?

We cannot configure Redis pods' SecurityContext at the container level.

@ordovicia ordovicia added the bug Something isn't working label Jun 6, 2023
@shubham-cmyk shubham-cmyk changed the title Cannot configure SecurityContext at container level [Feature] : Cannot configure SecurityContext at container level Jun 6, 2023
@shubham-cmyk shubham-cmyk added enhancement New feature or request and removed bug Something isn't working labels Jun 6, 2023
@shubham-cmyk
Copy link
Member

Fixed : #518

@shubham-cmyk shubham-cmyk self-assigned this Jun 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants