Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-3266

Leverage /dev/fuse in unprivileged containers within OpenShift

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Done
    • Undefined
    • None
    • None
    • Node
    • False
    • None
    • False
    • Not Selected
    • 0
    • 0% 0%

    Description

      1. Proposed title of this feature request
      Leverage /dev/fuse in unprivileged containers within OpenShift

      2. What is the nature and description of the request?
      Have the ability to leverage /dev/fuse in unprivileged containers within OpenShift.

      3. Why does the customer need this? (List the business requirements here)
      The lack of support for "fuse" and "user namespaces" increases the security risk of running certain types of workloads on OpenShift.

      4. List any affected packages or components.
      Node
      crio

      Attachments

        Issue Links

          is blocked by

          Feature - Capability or a well-defined set of functionality that delivers business value. Features can include additions or changes to existing functionality. Features can easily span multiple teams, and potentially multiple releases. OCPSTRAT-207 Support User Namespaces in pods

          • Critical - To be worked on immediately following BLOCKER issues.
          • In Progress
          is related to

          Feature - Capability or a well-defined set of functionality that delivers business value. Features can include additions or changes to existing functionality. Features can easily span multiple teams, and potentially multiple releases. OCPSTRAT-198 Secure-by-default image builds

          • Critical - To be worked on immediately following BLOCKER issues.
          • New

          Feature - Capability or a well-defined set of functionality that delivers business value. Features can include additions or changes to existing functionality. Features can easily span multiple teams, and potentially multiple releases. OCPSTRAT-1009 Enable /dev/fuse in unprivileged containers within OpenShift

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed

          Activity

            People

              gausingh@redhat.com Gaurav Singh
              rhn-support-bsmitley Brandon Smitley
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: