Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable customization of securityContext for containers #1675

Open
andrewmyhre opened this issue Oct 25, 2024 · 0 comments
Open

Enable customization of securityContext for containers #1675

andrewmyhre opened this issue Oct 25, 2024 · 0 comments
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@andrewmyhre
Copy link

Describe the solution you'd like
The webhook containers currently require privilege escalation to execute. In our organization Kubernetes clusters strictly enforce security context to disallow privilege escalation without sufficient justification. We have been maintaining our own fork of this Helm chart with the following amendment to the upgrade webhook job manifests:

spec:
  template:
    spec:
        containers:
        - name: crds-upgrade # same for crds-keep
          securityContext:
            allowPrivilegeEscalation: false

The webhooks are able to operate without privilege escalation enabled. We don't want to maintain our own fork of the Helm chart, we would prefer that the securityContext for these containers is able to be configured via the values.yaml file.

Anything else you would like to add:

Environment:

  • Secrets Store CSI Driver version: (use the image tag): v1.4.6
  • Kubernetes version: (use kubectl version):
@andrewmyhre andrewmyhre added the kind/feature Categorizes issue or PR as related to a new feature. label Oct 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

1 participant