Skip to content

Conversation

@ChunyiLyu
Copy link
Contributor

This closes #

Note to reviewers: remember to look at the commits in this PR and consider if they can be squashed

Summary Of Changes

Detailed context in issue: https://github.com/rabbitmq/opportunities/issues/156

Openshift expects containers to be able to run with arbitrary user ids. Their recommendation is for all files that processes need to access during runtime, give permission to the root group and the Openshift random users are all from the root group.

Additional Context

Local Testing

Please ensure you run the unit, integration and system tests before approving the PR.

To run the unit and integration tests:

$ make unit-tests integration-tests

You will need to target a k8s cluster and have the operator deployed for running the system tests.

For example, for a Kubernetes context named dev-bunny:

$ kubectx dev-bunny
$ make destroy deploy-dev
# wait for operator to be deployed
$ make system-tests

Copy link
Contributor

@coro coro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested on EKS and all LGTM.

@ChunyiLyu ChunyiLyu merged commit 6d9a96b into main Jan 12, 2022
@ChunyiLyu ChunyiLyu deleted the fsGroup-openshift branch January 12, 2022 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants