Project

Profile

Help

Story #5141

Story #5132: [Epic] As a user, I can consume Pulp 3 from OperatorHub.io

The postgres container (when part of pulp-operator at least) should use an fsGroup

Added by mdepaulo@redhat.com about 2 years ago. Updated 5 months ago.

Status:
MODIFIED
Priority:
Normal
Assignee:
Category:
Operator
Sprint/Milestone:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:

Description

This way, postgres runs as the postgres user.

Associated revisions

Revision 615b338c View on GitHub
Added by chambridge 5 months ago

Add security context fsGroup to deployment of postgres container

Persistent volume will be accessed with UID and group associated with postgres as defined in the image

fixes #5141 https://pulp.plan.io/issues/5141

History

#1 Updated by fao89 over 1 year ago

  • Tags CI/CD added

#2 Updated by fao89 about 1 year ago

  • Category set to Operator

#3 Updated by mdepaulo@redhat.com 6 months ago

  • Assignee deleted (mdepaulo@redhat.com)
  • Tags deleted (CI/CD)

#4 Updated by chambridge 5 months ago

So this reads as update the postgresql deployment with a securityContext:

  securityContext:
    fsGroup: ???

https://github.com/pulp/pulp-operator/blob/main/roles/postgres/templates/postgres.deployment.yaml.j2

Not clear what the fsGroup value should be here. I see some CrunchyData results that have "26", but I don't want to assume.

#5 Updated by chambridge 5 months ago

  • Assignee set to chambridge

Looking at the postgresql-96-centos7:96 image Dockerfile used by the operator https://github.com/pulp/pulp-operator/blob/main/roles/postgres/templates/postgres.deployment.yaml.j2#L36

Image: https://hub.docker.com/r/centos/postgresql-96-centos7

The UID being used is 26

Will update the deployment with:

  securityContext:
    runAsUser: 26
    fsGroup: 26

#6 Updated by pulpbot 5 months ago

  • Status changed from NEW to POST

#7 Updated by chambridge 5 months ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100

Please register to edit this issue

Also available in: Atom PDF