Skip to content

gateway.runAsRoot has invalid fields #24469

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
howardjohn opened this issue Jun 5, 2020 · 3 comments · Fixed by #24506
Closed

gateway.runAsRoot has invalid fields #24469

howardjohn opened this issue Jun 5, 2020 · 3 comments · Fixed by #24506
Assignees
@dgn
Labels
area/environments
Milestone
1.7

Comments

@howardjohn
Copy link
Member 

        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        privileged: false
        readOnlyRootFilesystem: true

Are only valid on container.securityContext, not pod.securityContext.

Somehow istioctl install works but istioctl manifest generate fails.. need to investigate more
@howardjohn howardjohn added this to the 1.7 milestone Jun 5, 2020
@howardjohn
Copy link
Member Author

oh interested, install will marshal it into the client-go type and drop unknown fields...

@dgn
Copy link
Contributor

dgn commented Jun 5, 2020

Thanks for catching this @howardjohn, will submit a PR shortly

@dgn
Copy link
Contributor

dgn commented Jun 5, 2020

Strangely, I remember verifying this and it worked fine

@dgn dgn mentioned this issue Jun 8, 2020
Merged
@dgn dgn mentioned this issue Jun 9, 2020
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dgn dgn

Labels
area/environments
Projects
None yet
Milestone
1.7
Development

Successfully merging a pull request may close this issue.

manifests: fix PodSecurityContext for gateways dgn/istio
2 participants
@howardjohn @dgn