-
Task
-
Resolution: Done
-
Undefined
-
ACM 2.9.1
-
False
-
None
-
False
-
-
-
No
Create an informative issue (See each section, incomplete templates/issues won't be triaged)
Using the current documentation as a model, please complete the issue template.
Note: Doc team updates the current version and the two previous versions (n-2). For earlier versions, we will address only high-priority, customer-reported issues for releases in support.
Prerequisite: Start with what we have
Always look at the current documentation to describe the change that is needed. Use the source or portal link for Step 4:
- Use the Customer Portal: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes
- Use the GitHub link to find the staged docs in the repository: https://github.com/stolostron/rhacm-docs
Describe the changes in the doc and link to your dev story
Provide info for the following steps:
1. - [x] Mandatory Add the required version to the Fix version/s field.
2. - [x] Mandatory Choose the type of documentation change.
- [x] New topic in an existing section or new section
https://github.com/stolostron/rhacm-docs/blob/2.9_stage/release_notes/whats_new.adoc#whats-new
- [ ] Update to an existing topic
3. - [x] Mandatory for GA content:
- [x] Add steps and/or other important conceptual information here:
We have addressed security review points indicated by our linting tools regarding the user that our container images use to run their commands.
Previously they were running as the root user. Now they use a non-root user with UID/GUID 1001:1001. This should makes the images more in line with current security guidelines. The updated images are:
- Metrics Collector
- Grafana Dashboard Loader
- Multicluster Observability Operator
- RBAC Query Proxy
- [ ] Add Required access level for the user to complete the task here:
- [ ] Add verification at the end of the task, how does the user verify success (a command to run or a result to see?)
- [x] Add link to dev story here: https://issues.redhat.com/browse/ACM-8507
4. - [ ] Mandatory for bugs: What is the diff? Clearly define what the problem is, what the change is, and link to the current documentation:
- is related to
-
ACM-8507 Run MCO related containers as non-root user
- In Progress