Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run Ingress as non root #762

Closed
dhatri308 opened this issue Nov 14, 2019 · 2 comments
Closed

Run Ingress as non root #762

dhatri308 opened this issue Nov 14, 2019 · 2 comments

Comments

@dhatri308
Copy link

Describe the bug
We are currently using version v1.4.6. We want to run ingress as non root . runAsUser: 33/101 but these users have issue with permissions to etc/nginx.

To Reproduce
Steps to reproduce the behavior:

  1. Deploy v1.4.6 daemon set
  2. In pod definition, have runAsUser: 33/101 in container SecurityContext
  3. In pod logs, we see "nginx.go:248] Couldn't create a temp file for the secret file default: open /etc/nginx/secrets/default664345291: permission denied"

Expected behavior
Ingress controller starts fine

Your environment

  • Version of the Ingress Controller - v1.4.6
  • Version of Kubernetes - 1.11
  • Using NGINX

Additional context
We did try adding a shell script and override permissions of /etc/nginx but only owner/root can do this. So the operation cannot be performed. Please suggest.

@pleshakov
Copy link
Contributor

@dhatri308
Unfortunately, it is not possible to run the IC with non-root user in release 1.4.* and release 1.5.*

we recently added support for non-root user in the master branch (#710) and it is available in the IC edge version.

We will include that feature in 1.6.0 release, which we plan for the first half of December.

@dhatri308
Copy link
Author

dhatri308 commented Nov 14, 2019

@pleshakov Thanks for your quick response.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants