itzg / itzg/minecraft-server-charts

SecurityContext seems to be breaking bedrock

Open
#164 11 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Mustache
Stars
406
Forks
164
Avg merge
1h 34m
Merged PRs (30d)
1

Description

Hi, updating the chart to the latest version seems to be breaking filesystem access within the entrypoint script.

DEBU[0000] Using /data to match uid and gid
DEBU[0000] Resolved UID=0 from match path
DEBU[0000] Resolved GID=0 from match path
Looking up latest version...
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
/opt/bedrock-entry.sh: line 23: restify.err: Permission denied
Updating permissions
/opt/bedrock-entry.sh: line 161: permissions.json: Permission denied

Am I missing something here ?

Thanks for all the work :)

Contributor guide

No contributing guide indexed for this repository

Research direction

Inspect the chart's SecurityContext settings and the affected paths in /opt/bedrock-entry.sh, especially lines 23 and 161. Reproduce the latest chart with Bedrock and trace why restify.err and permissions.json are not writable. Done means the entrypoint can access those files under the intended security settings.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes, shell
Domain
devops, infrastructure, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.