Page MenuHomePhabricator

containerSecurityContext
Closed, DuplicatePublic

Description

Minikube was able to deploy an updated version of jupyterhub without:

containerSecurityContext:
  runAsUser: 52771
  runAsGroup: 52771

defined for several containers. Prod however has this restricted. I don't believe that manifests/psp.yaml is deployed via helm, and it contains the PodSecurityPolicy that reference this. If this can be included in a minikube deploy it would likely catch similar things.

Related Objects

StatusSubtypeAssignedTask
Resolved rook
ResolvedNone
DuplicateNone