Issue with runAsNonRoot

[jclarksnps]

Not entirely sure that your check for runAsNonRoot is working, or we mis-understand exactly what it's checking. We have a pod running which is set at the pod level as below, yet reactive is still saying it shouldn't run as root... which it isn't. Since the securityContext at the container level is only for overriding what is set at the pod level I hope that being set at the pod level is enough. Any ideas?

securityContext:
runAsNonRoot: true
runAsUser: 5000

[endzyme]

Thanks @jclarksnps - after looking into this, it does look to be a bug. I have been able reproduce locally. I think the missing context here is that the securityContext is not set on the Container but it is set at the pod level. This is innate kube logic which is missing from polaris (since the validator is only checking the config at the container level, and not referencing anything at the pod level for this check). I can file this as a bug and we'll look at fixing this up in the validation logic. Thanks for the note!!

[jclarksnps]

Thanks!

[endzyme]

#149 Linking

[jclarksnps]

Thanks for fixing this, any eta on a release?

[endzyme]

Hi @jclarksnps - I'll get back to you shortly on the timing 😃 - Thanks again!

[endzyme]

@jclarksnps - I am planning on cutting a release tomorrow if that works for you! :)

[jclarksnps]

Thanks! Yep, we'll deploy and check it out.

[endzyme]

https://github.com/reactiveops/polaris/releases/tag/0.2.1 -- all set

thanks for your patience!