kubeslice / kubeslice/worker-operator

Update worker slice gateway pod spec with sidecar container level SecurityContext

Open
#361 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Go
Stars
62
Forks
33
Avg merge
3d 10h
Merged PRs (30d)
3

Description

### 📜 Description

Update worker slice gateway pod spec with sidecar container level SecurityContext

### 👟 Reproduction steps

Create a slice with 2 clusters.

### 👍 Expected behavior

Slice gateway sidecar security context is too permissive - please update.

### 👎 Actual Behavior

Review and update sidecar container SecurityContext to request only needed permissions.

### 🐚 Relevant log output

_No response_

### Version

_No response_

### 🖥️ What operating system are you seeing the problem on?

Linux

### ✅ Proposed Solution

_No response_

### 👀 Have you spent some time to check if this issue has been raised before?

- [X] I checked and didn't find any similar issue

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Research direction

Locate the worker slice gateway pod specification and inspect the sidecar container's SecurityContext. Reproduce with a slice containing two clusters, then verify that the sidecar requests only the permissions it needs and no longer has an overly permissive security context.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.