Add securityContext for the KBS deployment pod

confidential-containers / trustee-operator

Operator to manage the lifecycle of Trustee (KBS)

Apache License 2.0

2 stars 12 forks source link

Add securityContext for the KBS deployment pod #24

Closed lmilleri closed 3 months ago

lmilleri commented 3 months ago

Changed SecurityContext for KBS containers (first step in the direction of running non-root containers) Also, created 2 additional emptyDir volumes and mounted to kbs container to allow having r/w access to the kbs filesystem. Newly introduced functions:

createConfidentialContainersVolume
createDefaultRepositoryVolume