Skip to content

Don't run functions as gid=0 #663

@andeplane

Description

@andeplane

There is a runAsNonRoot setting in the faas-netes configuration, but functions do run as gid 0, which was raised as a potential problem by our security team.

Expected Behaviour

It should be possible to run with gid!=0.

Current Behaviour

Containers run as gid=0.

Your Environment

OpenFaaS on GKE.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions