argoproj / argoproj/argocd-example-apps

Run Sample Apps as Non Root

Open
#61 4 comments 7 reactions 0 assignees View on GitHub
Dominant language
Jsonnet
Stars
2.2k
Forks
10.3k
PR merge metrics
No merged PRs in 30d

Description

When testing out the guestbook sample app on a cluster in a restricted environment, the deployment fails due to the guestbook [container being run as root](https://github.com/argoproj/argocd-example-apps/blob/6bed858de32a0e876ec49dad1a2e3c5840d3fb07/guestbook/guestbook-ui-deployment.yaml#L16). It would be nice to specify a securityContext for the deployment since it should not need privileged permissions.

While this is a sample app, it would be nice to promote the practice of not running containers as root and also help to prevent running into the issue of the Getting Started tutorial not working in certain Kubernetes environments.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with guestbook/guestbook-ui-deployment.yaml at the linked container definition and review how the deployment runs the guestbook UI. Update the deployment's security settings so it works in restricted Kubernetes environments, then verify that the guestbook sample and Getting Started tutorial deploy successfully without running the container as root.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
devops, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.