-
Notifications
You must be signed in to change notification settings - Fork 632
Description
Hello,
I've noticed that the postgres container of the pods created by the operator have a very basic securityContext:
securityContext:
runAsUser: 1001I saw there's a way to set the seccompProfile but I was hoping one can also set the full securityContext of the container, which doesn't seem to be the case. This is a problem when the restricted PSS is enforced.
This could become part of the ClusterSpec object - e.g. keeping the current value as defaults, but adding the option to override if required.
I don't know how much work this would represent, and I would be happy to help if I can - I would just need some guidance to get started.
Fred
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancement 🪄New feature or requestNew feature or request
Type
Projects
Status
Done
Status
Done