Closed
Description
In OpenShift the uid of non privileged pod is randomized. the k8gb chart tries to set runAsUser to 1000 preventing the k8gb and the externalDNS pods to start. I don't see a reason why for these pods a specific uid this would be needed.
Possible solutions:
- let the user specify the uid, guid via chart parameter
- automatically set an acceptable value using the
lookop
function. The look up should do the equivalent of the following:
export uid=$(oc get project k8gb -o jsonpath='{.metadata.annotations.openshift\.io/sa\.scc\.uid-range}'|sed 's/\/.*//')
export guid=$(oc get project k8gb -o jsonpath='{.metadata.annotations.openshift\.io/sa\.scc\.supplemental-groups}'|sed 's/\/.*//')
- for OpenShift don't set any value.
Metadata
Assignees
Labels
Type
Projects
Status
Done
Activity