-
Notifications
You must be signed in to change notification settings - Fork 593
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
deploy: drop securityContext in podSpec for kong
Kong's docker image has been plagued with issues in the past: - ran as `root` user, which was often flagged by users - ran as user 1337, the magical PID used by Istio's proxy, this was for service mesh in kong, which has been removed in Kong 2.0. The securityContext was added as a stopgap solution to avoid such problems. This is now being removed for two reasons: - OpenShift cries out loud if runAsUser is set. It should be empty and OpenShift assigns a UID based on security settings in the platform. Removing this helps with a better user experience and optics. - Majority of users are now running more recent versions of Kong which already have the fix
- Loading branch information
Showing
5 changed files
with
0 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters