Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

podSecurityContext.runAsUser needs to be nulled as well for Openshift #655

Merged
merged 1 commit into from
Jun 23, 2020

Conversation

mephinet
Copy link
Contributor

@mephinet mephinet commented Jun 8, 2020

Currently, the Openshift example does not remove runAsUser completely. When deploying the chart in Openshift, this results in the error:

unable to validate against any security context constraint: [spec.containers[0].securityContext.securityContext.runAsUser: Invalid value: 1000: must be in the ranges: [1000630000, 1000639999]]

To verify without Openshift, you see that

$ helm template -f elasticsearch/examples/openshift/values.yaml elasticsearch elasticsearch/ | grep runAsUser

sets the UID, which is not allowed by the default Openshift security context.

This pull request fixes the example so that runAsUser is not set at all.

@elasticmachine
Copy link
Collaborator

Since this is a community submitted pull request, a Jenkins build has not been kicked off automatically. Can an Elastic organization member please verify the contents of this patch and then kick off a build manually?

@cla-checker-service
Copy link

cla-checker-service bot commented Jun 8, 2020

💚 CLA has been signed

Copy link
Member

@jmlrt jmlrt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM⛴

@jmlrt
Copy link
Member

jmlrt commented Jun 17, 2020

Hi @mephinet,
Thanks for your PR.
Can you sign the CLA: https://www.elastic.co/contributor-agreement

@mephinet
Copy link
Contributor Author

Hi @jmlrt , I already signed the CLA 3 times... ?

@jmlrt
Copy link
Member

jmlrt commented Jun 23, 2020

backported to 6.8, 7.8and 7.x branches

This was referenced Jul 16, 2020
This was referenced Jul 27, 2020
@jmlrt jmlrt mentioned this pull request Oct 28, 2020
This was referenced Nov 17, 2020
@jmlrt jmlrt mentioned this pull request Feb 8, 2021
This was referenced Mar 15, 2021
@jmlrt jmlrt mentioned this pull request May 25, 2021
@jmlrt jmlrt mentioned this pull request Mar 8, 2022
@jmlrt jmlrt mentioned this pull request Apr 21, 2022
This was referenced Sep 14, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants