Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-57331

Default security context is only applied to deployments

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 4.19.z
    • 4.19.0
    • HyperShift
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Rejected
    • None
    • Done
    • Release Note Not Required
    • N/A
    • None
    • None
    • None
    • None

      Description of problem:

      Default security context is only applied to deployments. For example the FeatureGateGenerationJob doesn't have a default security policy, so it may run as root.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Always

      Steps to Reproduce:

      1. Deploy 4.19
2. Look at the pod that the FeatureGateGenerationJob created

      Actual results:

      the spec for the pod does not contain a securityContext

      Expected results:

      the spec should contain a runAsUser in the securityContext

      Additional info:

              szepesit Tibor Szepesi (Inactive)
              szepesit Tibor Szepesi (Inactive)
              None
              None
              XiuJuan Wang XiuJuan Wang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: