Skip to content

Do not specify user id when generate Kubernetes Deployment for Workspace

MR: Pending

Description

When we generate the Kubernetes resources(e.g. Deployment) from the devfile, we explicitly set the user id that it should run as. If memory serves me right, setting the securityContext in the pod configuration was a recommended security practice. However, what point does setting the runAsUser serve? Can we remove it?

Removing it would significantly simplify our documentation which is a mess right now.

Acceptance Criteria

  • A decision if we can remove runAsUser attribute of the security context. If the answer is no, the reason for it.
  • Can we remove some other attributes as well?

Technical Requirements

TODO: Fill out or delete (optional) [If applicable, please list out any technical requirements for this feature/enhancement.]

Design Requirements

TODO: Fill out or delete (optional) [If applicable, please provide a link to the design specifications for this feature/enhancement.]

Impact Assessment

TODO: Fill out or delete (optional) [Please describe the impact this feature/enhancement will have on the user experience and/or the product as a whole.]

User Story

TODO: Fill out or delete (optional) [Provide a user story to illustrate the use case for this feature/enhancement. Include examples to help communicate the intended functionality.]

Edited by Vishal Tak