Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-12063

Infinispan Operator should not use busybox in initcontainer

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Unresolved
    • Major
    • None
    • 11.0.0.Final
    • Operator
    • None

    Description

      Currently, Infinispan Operator sets up an initContainer to fix possible permission issues on the storage used by the container. This initContainer uses busybox:latest :

      https://github.com/infinispan/infinispan-operator/blob/master/pkg/controller/infinispan/infinispan_controller.go#L1270

      This is a security issue. It can also create an exception if someone by mistake breaks the busybox shell.

      It will be needed that an ubi8 image is used, like in the infinispan base image. Better if the same infinispan image (that also has a shell) can be used, so only one is downloaded.

       

      Attachments

        Activity

          People

            vrigamon@redhat.com Vittorio Rigamonti
            rgordill1@redhat.com Ramon Gordillo Gutierrez
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: