Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add securityContext configuration for TargetAllocator #2397

Closed
frances-barcelos opened this issue Nov 28, 2023 · 2 comments
Closed

Add securityContext configuration for TargetAllocator #2397

frances-barcelos opened this issue Nov 28, 2023 · 2 comments
Assignees
Labels
area:target-allocator Issues for target-allocator enhancement New feature or request

Comments

@frances-barcelos
Copy link
Contributor

Component(s)

target allocator

Is your feature request related to a problem? Please describe.

We have enforced OPA policies which means we have to set runAsUser in our deployments. Can we have the option to set the securityContext for the targetallocator?

admission webhook \"webhook.openpolicyagent.org\" denied the request: runAsUser not specified kind

Describe the solution you'd like

Add securityContext configuration for Target Allocator.

spec: mode: statefulset targetAllocator: enabled: true runAsUser: 65532

Describe alternatives you've considered

No response

Additional context

No response

@frances-barcelos frances-barcelos added enhancement New feature or request needs triage labels Nov 28, 2023
@jaronoff97
Copy link
Contributor

Thanks for this issue – this is certainly something we should add, and we're actually looking in to splitting out the target allocator in to its own CRD (see here for the beginning of that work). I think this is probably worth doing before then though. Would you be able to work on this? Here's an example of what to do

@jaronoff97 jaronoff97 added area:target-allocator Issues for target-allocator and removed needs triage labels Nov 28, 2023
@jaronoff97 jaronoff97 added this to the v1alpha2 CRD release milestone Nov 28, 2023
@frances-barcelos
Copy link
Contributor Author

Sure! Would you mind assigning this to me please? Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:target-allocator Issues for target-allocator enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants