Support 'securityContext' - Githubissues

everpeace / kube-openmpi

Open MPI jobs on Kubernetes

Apache License 2.0

112 stars 25 forks source link

Support 'securityContext' #1

Closed everpeace closed 6 years ago

everpeace commented 6 years ago

s6-overlay, which currently used in base container, cannot run as non-root users.

To support securityContext.runAs

remove s6-overlay dependency and
introduce self-managed sshd script
instead of fix-attrs.d, it had to copy mounted user ssh keys to local dir to correct key files permission(600 for files, 700 for dirs)
- reference k8s issue: https://github.com/kubernetes/kubernetes/issues/2630