element-hq / element-hq/ess-helm

Allow to set hostUsers: false for all workloads

Open
#934 4 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
951
Forks
144
Avg merge
21h 32m
Merged PRs (30d)
65

Description

**Is your feature request related to a problem? Please describe.**

We want to run as many pods as possible with [user namespaces](https://kubernetes.io/docs/tasks/configure-pod-container/user-namespaces/) to enhance security in our cluster.

**Describe the solution you'd like**

The helm chart should allow us to set the `hostUsers` field for all workloads. It should still allow not setting this field at all for users who run an old Kubernetes version or a runtime that does not support user namespaces yet.

**Describe alternatives you've considered**

A kustomize-based patch on top of the helm chart.

**Additional context**

User namespaces will be GA with Kubernetes 1.35 but are already enabled by default since 1.33.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.