stop hardcoding VCAP UID when desiring tasks and LRPs

cloudfoundry / eirini

Pluggable container orchestration for Cloud Foundry, and a Kubernetes backend

Apache License 2.0

115 stars 30 forks source link

stop hardcoding VCAP UID when desiring tasks and LRPs #116

Closed cwlbraa closed 4 years ago

cwlbraa commented 4 years ago

see https://github.com/cloudfoundry/cf-for-k8s/issues/483#issue-711800977 for context about what all was broken by having a hardcoded UID. In short, containers that were built to run with non-2000 UIDs will not run. runAsNonRoot should prevent users from running as UID 0, giving them root on the host.

cf-gitbot commented 4 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/175128565

The labels on this github issue will be updated when the story is started.