You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After the change that adds fsGroup automatically (#1404) chart deployments on restricted environments (e.g. OpenShift) started to fail.
In OpenShift containers run as non root with random user id and directories with mounted volumes are automatically chown'ed. Thus, statically setting fsGroup is not an option in OpenShift.
Proposed solution to overcome this issue would be to introduce additional value compatability.omitSecurityContextFsGroup (or any other proposed name). The default for new value would be false and if it is as true the chart would omit fsGroup property.
Happy to open PR for this (after deciding on possible solution/naming).
The text was updated successfully, but these errors were encountered:
After the change that adds
fsGroup
automatically (#1404) chart deployments on restricted environments (e.g. OpenShift) started to fail.In OpenShift containers run as non root with random user id and directories with mounted volumes are automatically
chown
'ed. Thus, statically settingfsGroup
is not an option in OpenShift.Proposed solution to overcome this issue would be to introduce additional value
compatability.omitSecurityContextFsGroup
(or any other proposed name). The default for new value would befalse
and if it is astrue
the chart would omitfsGroup
property.Happy to open PR for this (after deciding on possible solution/naming).
The text was updated successfully, but these errors were encountered: