Skip to content

Conversation

@maksym-iv
Copy link
Contributor

@maksym-iv maksym-iv commented Nov 3, 2025

Setting statefulset.podTemplate.spec.securityContext.runAsNonRoot: true (spec.template.spec.securityContext.runAsNonRoot: true in STS) will cause the STS pods to fail the startup with CreateContainerConfigError: Error: container's runAsUser breaks non-root policy... error .

Since RunAsUser is already hardcoded to 0 it seems to make sense to explicitly allow root with runAsNonRoot: false for the tuning initContainer

Fixes the #1162

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@RafalKorepta
Copy link
Contributor

I opened new PR #1165. Thank you for your fix!

@maksym-iv-ef
Copy link

I opened new PR #1165. Thank you for your fix!

tyty, my bad, I should have read a bit more to helmette and testing approach with it
As an excude - was making PR in a rush 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants