itzg / itzg/minecraft-server-charts
SecurityContext seems to be breaking bedrock
- Dominant language
- Mustache
- Stars
- 406
- Forks
- 164
- Avg merge
- 1h 34m
- Merged PRs (30d)
- 1
Description
Hi, updating the chart to the latest version seems to be breaking filesystem access within the entrypoint script.
DEBU[0000] Using /data to match uid and gid
DEBU[0000] Resolved UID=0 from match path
DEBU[0000] Resolved GID=0 from match path
Looking up latest version...
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
Updating permissions
/opt/bedrock-entry.sh: line 161: permissions.json: Permission denied
Am I missing something here ?
Thanks for all the work :)
Contributor guide
No contributing guide indexed for this repository
Research direction
Inspect the chart's SecurityContext settings and the affected paths in /opt/bedrock-entry.sh, especially lines 23 and 161. Reproduce the latest chart with Bedrock and trace why restify.err and permissions.json are not writable. Done means the entrypoint can access those files under the intended security settings.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, shell
- Domain
- devops, infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100