fluent / fluent/fluent-bit

Feasibility of Running Fluent Bit as Non-Root User

Open
#11,807 3 comments 0 reactions 0 assignees View on GitHub
not-an-issue question
Dominant language
C
Stars
8.1k
Forks
2k
Avg merge
4d 20h
Merged PRs (30d)
71

Description

We have a compliance/vulnerability finding raised against our Fluent Bit deployment regarding containers running as the root user.

We would like to check with the Fluent Bit team on the feasibility and supportability of running Fluent Bit as a non-root user in our environment.

Could you please help clarify the following:

1. Does Fluent Bit officially support running as a non-root user?
2. Are there any known limitations or feature impacts when running non-root?
3. Are there recommended securityContext settings (runAsUser, fsGroup, capabilities, etc.)?
4. Are any specific directories/files required to remain writable by root?
5. Have there been any validated deployments or best practices for OpenShift/Kubernetes environments using non-root execution?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.