bug: nfs init container should have `runAsNonRoot: false`
It seems like in recent versions of k8s, the kubelet doesn't like it when runAsUser
is set to 0
but runAsNonRoot
is not set to false
. The kubelet returns the following policy violation:
Warning Failed 4m42s (x12 over 6m43s) kubelet Error: container's runAsUser breaks non-root policy (pod: "confluence0_confluence(875dbf8e-6e44-44cd-bf78-49d29b962b5e)", container: nfs-permission-fixer)
We should set it by default to runAsNonRoot: false
like the Jira chart does here: https://repo1.dso.mil/big-bang/product/community/jira/-/blob/f904e1b2c0022748c81c0a482c9eeeef2f2ac3f2/chart/templates/statefulset.yaml#L69
Appears to affect at least k8s v1.27.12
Edited by Daniel Palmer