Skip to content

Commit a708358

Browse files
committed
Change guidance around filesystem & user IDs
Signed-off-by: Tom Kerkhove <[email protected]>
1 parent c53e9fc commit a708358

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

articles/api-management/how-to-self-hosted-gateway-on-kubernetes-in-production.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -158,14 +158,16 @@ securityContext:
158158
runAsUser: 1000
159159
runAsGroup: 2000
160160
privileged: false
161-
readOnlyRootFilesystem: true
162161
capabilities:
163162
drop:
164163
- all
165164
```
166165
167166
> [!WARNING]
168-
> When using local CA certificates, using `readOnlyRootFilesystem: true` is not supported.
167+
> Running the self-hosted gateway with read-only filesystem (`readOnlyRootFilesystem: true`) is not supported.
168+
169+
> [!WARNING]
170+
> When using local CA certificates, the self-hosted gateway must run with user ID (UID) `1001` in order to manage the CA certificates otherwise the gateway will not start up.
169171

170172
## Next steps
171173

0 commit comments

Comments
 (0)