search

RedisLabs / redis-enterprise-k8s-docs

151 stars 89 forks source link

redislabs/redis/7.2.4-64.rhel8-openshift image requires UID 1001 to run pod #270

Open Darknight123 opened 8 months ago

Darknight123 commented 8 months ago

Hi Team,

We want to use Redis as caching solution for one of our use case and for the same have downloaded image - redis-7.2.4-64.rhel8-openshift from docker hub - (https://hub.docker.com/layers/redislabs/redis/7.2.4-64.rhel8-openshift/images/sha256-5136fad94063d8bb6a65ac3c0fa3e41ca33f6cf16fcefbb9e0e74b24317a5b29?context=explore) While spinning up the pod on our openshift platform we have faced several issues and below are some critical issues

  1. image that has been provided is only allowed to be run as a uid 1001
  2. Due to this constraint we need to modify the image dockerfile by giving read and execute permission to others on /opt/redislabs directory and subdirectories. Here in our infrastructure we are not allowed to run any pod with specific uid due to security reasons, rather than that we are running under securityContext: capabilities: drop:
    • ALL privileged: false runAsUser: runAsNonRoot: true allowPrivilegeEscalation: false

Can we please have a Redis image that can be very well used specifically for openshift without having any UID constraints.