kubeslice / kubeslice/worker-operator

Bug: Kubeslice runs with privileged permissions, we need a minimal set of permissions.

Open
#449 2 comments 0 reactions 5 assignees Claimed by @richiesebastian View on GitHub
bug
Dominant language
Go
Stars
62
Forks
33
Avg merge
3d 10h
Merged PRs (30d)
3

Description

### 📜 Description

In openshift environment kubeslice cannot run as with privileged permissions, there needs to be minimal set of permissions to run kubeslice in openshift.

We can achieve this with a security context with a minimal set of permissions instead of running kubeslice with full privileged permissions.

This change will have to be applied in a number of KubeSlice components not just worker-operator.

### 👟 Reproduction steps

install kubeslice in openshift

### 👍 Expected behavior

It should run in openshift without privileged permissions out of the box.

### 👎 Actual Behavior

Fails to run kubeslice on openshift

### 🐚 Relevant log output

```shell

```

### Version

_No response_

### 🖥️ What operating system are you seeing the problem on?

_No response_

### ✅ Proposed Solution

With a security context with a minimal set of permissions instead of running kubeslice with full privileged permissions.

This change will have to be applied in a number of KubeSlice components not just worker-operator.

### 👀 Have you spent some time to check if this issue has been raised before?

- [x] I checked and didn't find any similar issue

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.