kubereboot / kubereboot/charts

Need to set hostPID and hostIPC to false in Kured

Open
#39 5 comments 1 reaction 0 assignees View on GitHub
question
Dominant language
Mustache
Stars
37
Forks
21
PR merge metrics
No merged PRs in 30d

Description

As per the security recommendation to avoid containers sharing sensitive host namespaces, I need to set the `hostPID` and `hostIPC` to false on the pod spec in Kured.

We are using helm chart to deploy the Kured and when i deploy by assigning the value to false it is not reflecting in pod values.yaml.

Please let me know if any input is required.

Please assist me to solve this.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the chart's values.yaml and the pod spec template that consumes the hostPID and hostIPC settings. Render the Helm chart with both values set to false, then inspect the resulting pod specification and confirm both fields are explicitly false.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
devops, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.