-
Epic
-
Resolution: Done
-
Critical
-
None
-
Reduced build privileges
-
False
-
False
-
Done
-
SECFLOWOTL-55 - Enhance outerloop security
-
66
-
66%
-
Undefined
-
Goal
As a cluster-admin, I want image build tasks to run as rootless builds in order to reduce the security risk of running privileges builds on the OpenShift cluster.
Estimation
M
Acceptance Criteria
- Buildah task can run in user namespaces and as a non-root container on the host
- Buildah task can run as non-root inside the taskrun container
- is documented by
-
RHDEVDOCS-3306 Document running image build tasks as unprivileged builds
-
- Closed
-
-
-
- Closed
-
- is related to
-
-
- To Do
-
- relates to
-
-
- Closed
-
