Comments (6)
Yeah I agree. We have automated chart upgrades for our external charts. So we upgrade to latest version once every week.
I can see this possibly 'defeating' the purpose. But it fixes for now to maintain uptime. Going to look into the changes soon.
from charts.
Hi everyone! I just created a PR to address this issues so it's possible to install custom plugins without reverting security defaults.
from charts.
Hi,
Just had a similar issue with helm chart version 13.0.0. The below may help?
It looks like some default values have been added to the statefulset and when deployed it was crashing one of my nodes.
This is what has changed:
I added this to my values (which it was previously) and it has fixed it:
containerSecurityContext:
readOnlyRootFilesystem: false
runAsGroup: 0
from charts.
Thanks, This fixes the issue.
Reason we are using 13.0.0 release is the security improvements we got, this might defeat the purpose.
from charts.
Hello @pidge-raman, this is indeed an issue introduced in the new major which I could reproduce locally:
$ kubectl logs rabbitmq-0
...
rabbitmq 16:35:09.70 INFO ==> Validating settings in RABBITMQ_* env vars..
rabbitmq 16:35:09.71 INFO ==> Initializing RabbitMQ...
rabbitmq 16:35:09.71 DEBUG ==> Downloading custom plugins...
Thanks for the proposed workaround @mentlak0, we appreciate your involvement! If you're interested in contributing a solution, we welcome you to create a pull request. The Bitnami team is excited to review your submission and offer feedback. You can find the contributing guidelines here.
Your contribution will greatly benefit the community. Feel free to reach out if you have any questions or need assistance.
from charts.
The same issue after some digging:
/opt/bitnami/rabbitmq/plugins
is under root:root permission even volumePermissions.enable = true
not change it
so when we specify communityPlugins
rabbitmq try download and put plugin into this directory and don't have permission with exitCode: 23
from charts.
Related Issues (20)
- redis replicas template does not have variable substitution for redis-data mountPath HOT 1
- [bitnami/minio] add event provisiong HOT 1
- [bitnami/argo-cd] Argo-CD Cluster Roles to support multiple namespaces, Dynamic Cluster Distribution issue with controller. HOT 1
- charts.bitnami.com provider DNSSEC configuration invalid HOT 3
- [bitnami/rabbitmq] Failed to connect to 127.0.0.1 port 15672 after 0 ms: Couldn't connect to server HOT 2
- [bitnami/mongodb] Missing backup retention option HOT 3
- [bitnami/grafana-loki] promtail secret should not be created if existingSecret is specified HOT 1
- [bitnami/postgresql-ha] ERROR: duplicate key value violates unique constraint "UQE_user_login" HOT 3
- The index file has over 15MB again HOT 3
- [bitnami/airflow] Support alternative broker to Redis HOT 4
- [bitnami/discourse] Discourse db:migrate can't connect to redis HOT 11
- [bitnami/redis] persistence.labels are ignored HOT 1
- Kafka helm chart examples lead to literal '*' instead of wildcard HOT 6
- [bitnami/mongodb] Infinite loop in replicaSetConfigurationSettings.sh HOT 4
- [bitnami/harbor] exporter.existingEnvVarsSecret should be core.existingEnvVarsSecret
- [bitnami/redis] Redis pod going into "Succeeded" state after some time HOT 5
- Jenkins chart has incompatible configuration-as-code plugin
- [bitnami/keycloak] Support deploying keycloak config CLI configuration in secrets rather than in configMaps. HOT 3
- [bitnami/magento]while installing scripts of magento, it suddenly quited.
- Minio Ingress Probleme HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from charts.