search

permitio / opal-helm-chart

You know, for Kubernetes
Apache License 2.0
21 stars 22 forks source link

Docker image repository change #17

Closed JayanthVhavle closed 1 year ago

JayanthVhavle commented 1 year ago

The docker images pulled from authorizon repository (version: 0.1.18) were not getting initialised properly when container's securityContext was set to run as nonRoot user - 

 securityContext:
    fsGroup: 2000
    runAsNonRoot: true
    runAsUser: 1000
    allowPrivilegeEscalation: false

This is required when the pod security policy in kubernetes enforces containers to run with non root user.

Following was the error shown in the pod logs, common to both opal-client and opal-server:

  Traceback (most recent call last):
    File "/usr/local/bin/gunicorn", line 33, in <module>
      sys.exit(load_entry_point('gunicorn==20.1.0', 'console_scripts', 'gunicorn')())
    File "/usr/local/bin/gunicorn", line 22, in importlib_load_entry_point
      for entry_point in distribution(dist_name).entry_points
    File "/usr/local/lib/python3.8/importlib/metadata.py", line 503, in distribution
      return Distribution.from_name(distribution_name)
    File "/usr/local/lib/python3.8/importlib/metadata.py", line 177, in from_name
      raise PackageNotFoundError(name)
  importlib.metadata.PackageNotFoundError: gunicorn

Switching the docker repository from authorizon to permitio, and changing the version to 0.3.1 did the trick.