Uploaded image for project: 'OpenShift Top Level Product Strategy'
  1. OpenShift Top Level Product Strategy
  2. OCPPLAN-7965

Run pods in user namespaces

    XMLWordPrintable

Details

    • Runtimes
    • OCPPLAN-4518 - Builds with reduced privileges
    • 0
    • 0% 0%

    Description

      Customers need to be able to run builds within OpenShift with as little privilege as possible to provide defense in depth. The goal of this epic is to allow build pods to get launched in the user namespaces and enable running rootless buildah.

      Customers

      • Ford
      • Marriott
      • AXA
      • USAA
      • Quay

      Attachments

        Issue Links

          relates to

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. OCPBUILD-29 Run Builds Without Privileged Pods

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed
          links to

          Web Link Unprivileged builds notes

          Activity

            People

              mpatel1@redhat.com Mrunal Patel
              ssadeghi@redhat.com Siamak Sadeghianfar
              Min Li Min Li
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: