Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Add secured contatiners' features #1287

Merged
merged 2 commits into from
Jul 19, 2023
Merged

Conversation

informalict
Copy link
Contributor

@informalict informalict commented Apr 10, 2023

If this feature is enabled server container should:

  • Run-on ReadOnly FS
  • Run As Not root (on user 1000)
  • Run-on non-root group (2000)
  • Run with FSGroup (3000)
  • Drop all capabilities
  • Add ephemeral volumes to pods (check ephemeral volumes feature) - it should enable implicitly ephemeral volumes feature

Tests: https://github.com/arangodb/kube-arangodb-test/pull/168

@cla-bot cla-bot bot added the cla-signed label Apr 10, 2023
@informalict informalict changed the title Add secured contatiners' features [Feature] Add secured contatiners' features Apr 21, 2023
@ajanikow ajanikow force-pushed the GT-93/secure-containers branch from c569424 to 1db0be1 Compare July 18, 2023 11:21
@cla-bot
Copy link

cla-bot bot commented Jul 18, 2023

Fresh avocado detected! Welcome and thank you for your contribution @informalict. My avocado-loving overlords have decreed a signed CLA is required for PRs. Please see https://github.com/arangodb/arangodb/blob/devel/CONTRIBUTING.md file to learn more or ask @cw00dw0rd if you have issues.

@cla-bot cla-bot bot removed the cla-signed label Jul 18, 2023
@ajanikow ajanikow force-pushed the GT-93/secure-containers branch from 1db0be1 to f0d2615 Compare July 18, 2023 11:30
@cla-bot cla-bot bot added the cla-signed label Jul 18, 2023
@ajanikow ajanikow merged commit a221ce9 into master Jul 19, 2023
@ajanikow ajanikow deleted the GT-93/secure-containers branch July 19, 2023 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants