Skip to content
This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

How to run the flink-operator-controller-manager as non root user? #454

Open
timsn opened this issue Jun 11, 2021 · 0 comments
Open

How to run the flink-operator-controller-manager as non root user? #454

timsn opened this issue Jun 11, 2021 · 0 comments

Comments

@timsn
Copy link

timsn commented Jun 11, 2021

If I set the securityContext for the flink-operator container inside the flink-operator-controller-manager to run as non-root user (or to drop all capabilites) the container fails to run with the following error:

ERROR   setup   Problem running manager {"error": "listen tcp :443: bind: permission denied"}
github.com/go-logr/zapr.(*zapLogger).Error
        /root/go/pkg/mod/github.com/go-logr/[email protected]/zapr.go:128
main.main
        /workspace/main.go:101
runtime.main
        /usr/local/go/src/runtime/proc.go:203

Is this a technical limitation that the flink-operator has to run an root? Or is there a way to make it possible to run it as a different user?

Here is one example securityContext I tried (I also tried other users):

securityContext:
  runAsNonRoot: true
  runAsUser: 1000

Thank you!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant