Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow configuring UID GID etc in Kubernetes #4324

Closed
reckart opened this issue Nov 26, 2023 · 0 comments
Closed

Allow configuring UID GID etc in Kubernetes #4324

reckart opened this issue Nov 26, 2023 · 0 comments
Assignees
@reckart
Labels
⭐️ Enhancement New feature or request
Milestone
30.0

Comments

@reckart
Copy link
Member

reckart commented Nov 26, 2023

Is your feature request related to a problem? Please describe.
Kubernetes has several functionalities including setting a UID / GID / FID, setting a read-only root file system, which are part of many best-practices guides. However, they currently conflict with the functionalities in the INCEpTION Docker image to proactively manage UID / GID / FID and dropping privileges when run without setting any of these parameters in Kubernetes.

Describe the solution you'd like
Optimally, a solution where the Kubernetes settings are respected and used and the pro-active management only kicks in when run in a default scenario (e.g. docker run ).

Describe alternatives you've considered
Having multiple images for different deployment scenarios.
@reckart reckart added the ⭐️ Enhancement New feature or request label Nov 26, 2023
@reckart reckart self-assigned this Nov 26, 2023
reckart added a commit that referenced this issue Nov 26, 2023
@reckart
#4324 - Allow configuring UID GID etc in Kubernetes
1a81fd0 
- Adjust launch script to not try to fix file ownership and drop privileges when container is already not running as root
- Added additional VOLUME declarations in Dockerfile for tmp and log folders so the container can run with a read-only root filesystem (hopefully)
- Added a very very very very basic documentation on how one might consider using Kubernetes
reckart added a commit that referenced this issue Nov 29, 2023
@reckart
Merge pull request #4325 from inception-project/feature/4324-Allow-co…
6b11325 
…nfiguring-UID-GID-etc-in-Kubernetes

#4324 - Allow configuring UID GID etc in Kubernetes
@reckart reckart added this to the 30.0 milestone Nov 29, 2023
@reckart reckart closed this as completed Nov 29, 2023
reckart added a commit that referenced this issue Nov 29, 2023
@reckart
Merge branch 'release/29.x' into release/30.x
4b1b180 
* release/29.x:
  #4324 - Allow configuring UID GID etc in Kubernetes
reckart added a commit that referenced this issue Nov 29, 2023
@reckart
Merge branch 'release/30.x'
2d06828 
* release/30.x:
  #4324 - Allow configuring UID GID etc in Kubernetes
reckart added a commit that referenced this issue Nov 30, 2023
@reckart
Merge branch 'main' into feature/4292-ollama-based-recommender
429724a 
* main:
  #4328 - HTML files are not rendered if they use the HTML namespace
  #4326 - Upgrade dependencies
  #4324 - Allow configuring UID GID etc in Kubernetes
reckart added a commit that referenced this issue Nov 30, 2023
@reckart
Merge branch 'main' into refactoring/Upgrade-to-Spring-Boot-3
528a648 
* main:
  #4328 - HTML files are not rendered if they use the HTML namespace
  No issue: Route message through boot logger.
  #4326 - Upgrade dependencies
  #4324 - Allow configuring UID GID etc in Kubernetes

% Conflicts:
%	pom.xml
reckart added a commit that referenced this issue Dec 2, 2023
@reckart
#4324 - Allow configuring UID GID etc in Kubernetes
6e64770 
- Improve documentation
reckart added a commit that referenced this issue Dec 2, 2023
@reckart
Merge branch 'release/30.x'
4d04c5c 
* release/30.x:
  #4324 - Allow configuring UID GID etc in Kubernetes
  #4335 - Promote UIMA JSON CAS 0.4.0 to non-experimental
reckart added a commit that referenced this issue Dec 2, 2023
@reckart
Merge branch 'main' into feature/4334-New-take-on-TEI-support-based-o…
0b5c07a 
…n-generic-XML-support

* main:
  #4338 - Spurious empty annotations in RecogitoJS editor
  #4324 - Allow configuring UID GID etc in Kubernetes
  #4335 - Promote UIMA JSON CAS 0.4.0 to non-experimental
reckart added a commit that referenced this issue Dec 5, 2023
@reckart
Merge branch 'main' into feature/4292-ollama-based-recommender
9339104 
* main:
  #4347 - CAS doctor fails to generate a proper report on projects not containing INITIAL_CASes
  #4349 - Project has date in the 70ies if no data is set in JSON
  #4344 - Allow format to inject default namespace if document does not specify one
  #4342 - Show document size in documents table
  #4342 - Show document size in documents table
  No issue: Optimize tracking be excluding elements that contain no text
  No issue: Avoid scrollbar appearing at wrong level
  #4340 - Allow pruning elements in XML policy
  #4338 - Spurious empty annotations in RecogitoJS editor
  #4324 - Allow configuring UID GID etc in Kubernetes
  #4335 - Promote UIMA JSON CAS 0.4.0 to non-experimental
  #4326 - Upgrade dependencies
reckart added a commit that referenced this issue Dec 5, 2023
@reckart
Merge branch 'main' into refactoring/Upgrade-to-Spring-Boot-3
4aa1324 
* main:
  #4347 - CAS doctor fails to generate a proper report on projects not containing INITIAL_CASes
  #4349 - Project has date in the 70ies if no data is set in JSON
  #4344 - Allow format to inject default namespace if document does not specify one
  #4342 - Show document size in documents table
  #4342 - Show document size in documents table
  No issue: Optimize tracking be excluding elements that contain no text
  No issue: Avoid scrollbar appearing at wrong level
  #4340 - Allow pruning elements in XML policy
  #4338 - Spurious empty annotations in RecogitoJS editor
  #4324 - Allow configuring UID GID etc in Kubernetes
  #4335 - Promote UIMA JSON CAS 0.4.0 to non-experimental
  #4326 - Upgrade dependencies
  #4330 - Remove default memory limit for INCEpTION in Dockerfile
  #4229 - Better project template selection
  #4330 - Remove default memory limit for INCEpTION in Dockerfile
  #4229 - Better project template selection

% Conflicts:
%	inception/inception-external-editor/src/main/java/de/tudarmstadt/ukp/inception/externaleditor/xhtml/XHtmlXmlDocumentViewControllerImpl.java
@reckart reckart added this to Kanban Aug 7, 2024
@reckart reckart moved this to 🍹 Done in Kanban Aug 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@reckart reckart

Labels
⭐️ Enhancement New feature or request
Projects
Kanban
Archived in project
Milestone
30.0
Development

No branches or pull requests
1 participant
@reckart