puppetlabs / pupperware

Container fun time lives here.
Other
183 stars 66 forks source link

Make it possible to run pupperware in Openshift #209

Closed jgrumboe closed 3 years ago

jgrumboe commented 4 years ago

Use Case

I would like to run pupperware in k8s, especially in Openshift. I love the possibility to scale compile masters, which is not available in docker-compose.yml. But Openshift is per default restricted to non-priviledged containers and as far as I see puppet-docker images are assuming to be priviledged (startup scripts are trying to chmod and mkdir in non-volume directories,...)

Describe the Solution You Would Like

I would like to see docker images for pupperware to run as non-priviledged containers.

Describe Alternatives You've Considered

Alternative right now is to let it run as priviledged container, which means lowering the security inside my Openshift cluster namespace.

Additional Context

There are already other projects building puppetserver and other components images for Openshift. But they are slightly different I think to the official ones, but maybe a good starting point. for example: https://github.com/cegeka/docker-puppetserver or https://github.com/itsbcit/openshift-puppetserver

Xtigyro commented 4 years ago

Hey @jgrumboe - have you tried achieving that with our Helm chart?

jgrumboe commented 3 years ago

Haven't tried helm chart. Closing issue because forgot and have no need anymore.