Skip to content

Remove runAs and fsGroup to be compatible with OpenShift

Mikhail Mazurskiyrequested to merge
ash2k/no-run-as into master

Closes #139 (closed).

With this change agentk is not using the nonroot user on OpenShift and works fine:

On kind:

$ k exec gitlab-agent-7f4cb86b7f-lhpqs -- sh -c 'id'
uid=65532(nonroot) gid=65532(nonroot)

On OpenShift:

$ k exec pod/gitlab-agent-864fcf9c97-6dkzc -- sh -c 'id'            
uid=1000630000(1000630000) gid=0(root) groups=1000630000

Updating kas is out of scope here as that needs to be consistent with whatever we'll do for other containers i.e. it's part of gitlab-org/charts/gitlab#1069. Moreover, that would mean Chart changes - kas deployment is currently consistent with other deployments and I'd like it to stay that way. No point in fixing it if everything else doesn't work (?) anyway.

Edited by Mikhail Mazurskiy

Merge request reports