zalando / postgres-operator

Postgres operator creates and manages PostgreSQL clusters running in Kubernetes
https://postgres-operator.readthedocs.io/
MIT License
4.36k stars 980 forks source link

New feature: set RunAsNonRoot on securityContext of Postgres statfullset #2081

Open yyvess opened 2 years ago

yyvess commented 2 years ago

Why: On namespaces with security policy, Postgres cannot be deployed as the security context cannot be customized on the CRD. Postgres CRD allow only to setup a custom user with spiloRunAsUser, this PR will set RunAsNonRoot to true when spiloRunAsUser is set.

Example of security policies that block the deployment of Postgres:

kndoni commented 4 months ago

Hello is there someone still working on securityContext topics?