Skip to content

Backport of Net 4414 remove anyuid openshift requirement into release/1.5.x#4161

Merged
sarahalsmiller merged 1 commit intorelease/1.5.xfrom
backport/net-4414-remove-anyuid-openshift-requirement/daily-renewed-kite
Jul 9, 2024
Merged

Backport of Net 4414 remove anyuid openshift requirement into release/1.5.x#4161
sarahalsmiller merged 1 commit intorelease/1.5.xfrom
backport/net-4414-remove-anyuid-openshift-requirement/daily-renewed-kite

Conversation

@hc-github-team-consul-core
Copy link
Copy Markdown
Collaborator

@hc-github-team-consul-core hc-github-team-consul-core commented Jul 9, 2024

Backport

This PR is auto-generated from #4152 to be assessed for backporting due to the inclusion of the label backport/1.5.x.

The below text is copied from the body of the original PR.


Changes proposed in this PR

This PR solves two problems:

  • Adds the NET_BIND_SERVICE capability to the Consul Dataplane containers that are created. This work was done in another PR, but has been pulled into this one. Original PR
  • Removes the need on Openshift for using an SCC that allows anyuid. We now use the annotation provided by Openshift on the namespace to set the user and group IDs for our containers. This work was originally done in another PR, but has been pulled into this one and expanded to cover API gateways and use separate user/group IDs for the init + dataplane containers that do not conflict with application user/group IDs. Original PR

How I've tested this PR

Manual testing
Unit tests

How I expect reviewers to test this PR

Follow this gist to setup and install Consul onto Openshift

Checklist


Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/net-4414-remove-anyuid-openshift-requirement/daily-renewed-kite branch from 9b31704 to 095494c Compare July 9, 2024 20:23
Co-authored-by: Curt Bushko <cbushko@gmail.com>
Co-authored-by: Nathan Coleman <nathan.coleman@hashicorp.com>
@nathancoleman nathancoleman force-pushed the backport/net-4414-remove-anyuid-openshift-requirement/daily-renewed-kite branch from 095494c to b7b2c71 Compare July 9, 2024 20:30
@sarahalsmiller sarahalsmiller marked this pull request as ready for review July 9, 2024 20:31
@sarahalsmiller sarahalsmiller enabled auto-merge (squash) July 9, 2024 21:38
@sarahalsmiller sarahalsmiller merged commit 315c3e3 into release/1.5.x Jul 9, 2024
@sarahalsmiller sarahalsmiller deleted the backport/net-4414-remove-anyuid-openshift-requirement/daily-renewed-kite branch July 9, 2024 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants