Skip to content

Trouble with K8s platform expecting Jobs to meet security requirements #1432

@aicardi-obspm

Description

@aicardi-obspm

I tested lithops with a Rancher installation by e-INFRA CZ for the EGI federation.

I don't know if all Rancher installations are the same, but this one expects containers to meet some security requirements, such as non root execution and no privilege escalation.

I managed to create K8s jobs with lithops ont this platform after modifying the JOB_DEFAULT variable in lithops/serverles/backends/k8s/config.py with the lines :

      securityContext:
        allowPrivilegeEscalation: false
        runAsNonRoot: true
        runAsUser: 1000
        capabilities:
          drop: ["ALL"]
        seccompProfile:
          type: "RuntimeDefault"

I guess that this workaround is not the right way to configure lithops with kubernetes, so I don't propose this as a pull request.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions