kubeslice / kubeslice/worker-operator
Update worker slice gateway pod spec with sidecar container level SecurityContext
- Dominant language
- Go
- Stars
- 62
- Forks
- 33
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 3
Description
### 📜 Description
Update worker slice gateway pod spec with sidecar container level SecurityContext
### 👟 Reproduction steps
Create a slice with 2 clusters.
### 👍 Expected behavior
Slice gateway sidecar security context is too permissive - please update.
### 👎 Actual Behavior
Review and update sidecar container SecurityContext to request only needed permissions.
### 🐚 Relevant log output
_No response_
### Version
_No response_
### 🖥️ What operating system are you seeing the problem on?
Linux
### ✅ Proposed Solution
_No response_
### 👀 Have you spent some time to check if this issue has been raised before?
- [X] I checked and didn't find any similar issue
### Code of Conduct
- [X] I agree to follow this project's Code of Conduct
Contributor guide
Research direction
Locate the worker slice gateway pod specification and inspect the sidecar container's SecurityContext. Reproduce with a slice containing two clusters, then verify that the sidecar requests only the permissions it needs and no longer has an overly permissive security context.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- infrastructure, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100