Use Watcher user for the dbsync job - #407
Conversation
|
Build failed (check pipeline). Post ✔️ openstack-meta-content-provider-master SUCCESS in 2h 24m 23s |
Currently, the dbsync job pod is running as root which is not required and against the minimum privilege principle. This patch switches the dbsync job to use the Watcher user id. Signed-off-by: Alfredo Moralejo <amoralej@redhat.com>
|
Build failed (check pipeline). Post ✔️ openstack-meta-content-provider-master SUCCESS in 2h 53m 41s |
|
check-rdo |
1 similar comment
|
check-rdo |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: stuggi The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
48a2bba
into
openstack-k8s-operators:main
|
/cherry-pick 18.0-stable |
|
@amoralej: cannot checkout DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
/cherry-pick 18-stable |
|
@amoralej: new pull request created: #420 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
3 participants
Currently, the dbsync job pod is running as root which is not required and against the minimum privilege principle.
This patch switches the dbsync job to use the Watcher user id.