element-hq / element-hq/ess-helm
Allow to set hostUsers: false for all workloads
- Dominant language
- Python
- Stars
- 951
- Forks
- 144
- Avg merge
- 21h 32m
- Merged PRs (30d)
- 65
Description
**Is your feature request related to a problem? Please describe.**
We want to run as many pods as possible with [user namespaces](https://kubernetes.io/docs/tasks/configure-pod-container/user-namespaces/) to enhance security in our cluster.
**Describe the solution you'd like**
The helm chart should allow us to set the `hostUsers` field for all workloads. It should still allow not setting this field at all for users who run an old Kubernetes version or a runtime that does not support user namespaces yet.
**Describe alternatives you've considered**
A kustomize-based patch on top of the helm chart.
**Additional context**
User namespaces will be GA with Kubernetes 1.35 but are already enabled by default since 1.33.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.