Skip to content

Remove the ownership workaround when Cilium fixes #149

Description

@github-actions

https://github\.com/cilium/cilium/issues/40533\.

# TODO: Remove the ownership workaround when Cilium fixes
# https://github.com/cilium/cilium/issues/40533.

                  name: spire-data
                - mountPath: /tmp/spire-server/private
                  name: spire-server-socket
              # The chart's cilium-init bootstrap container reaches the SPIRE
              # admin socket through /proc/<pid>/root. Ptrace access requires
              # its UID/GID to match spire-server, so set the identity at pod
              # level; the chown init container overrides this back to root.
              # TODO: Remove the ownership workaround when Cilium fixes
              # https://github.com/cilium/cilium/issues/40533.
              podSecurityContext:
                runAsGroup: 1000
                runAsUser: 1000
              securityContext:
                runAsGroup: 1000
                runAsUser: 1000

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions