Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-549 Ensure pods containing Istio sidecar can run under the restricted SecurityContextConstraint
  3. MAISTRA-550

Obtain the UID for iptables filtering from the proxy container definition

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Done
    • Icon: Major Major
    • maistra-0.12.0
    • None
    • CNI
    • None
    • Maistra TP sprint 12

      Currently, Istio CNI has the user ID for which iptables redirection is not applied hardcoded to 1337. Instead, it should obtain the ID by reading securityContext.runAsUser of the sidecar container in the pod.

              mluksa@redhat.com Marko Luksa
              mluksa@redhat.com Marko Luksa
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: