Comments (1)
As workaround you can use a kyverno ClusterPolicy
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: postgresql-securitycontext
spec:
rules:
- name: mutate-postgresql-sts
match:
any:
- resources:
kinds:
- Pod
selector:
matchLabels:
application: spilo
mutate:
patchStrategicMerge:
spec:
containers:
- (name): "*"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true
from postgres-operator.
Related Issues (20)
- Backup with `ghcr.io/zalando/postgres-operator/logical-backup:v1.12.2` fails HOT 4
- spilo-role replica label missing from one of the patroni replica pods
- regsitry/repository/tag-approach for spilo and logical-backup image
- imagepullsecrets for postgres clusters in other namespaces than the operator HOT 1
- DB Passwords managed outside (Vault), how to trigger rollout restart ? HOT 3
- Helm value enable_crd_registration vs. Documentation
- Make PostgresContainerName configurable
- Questions regarding k8s version compatibility matrix change of v1.11.0 after the initial release HOT 2
- Postgresql service timeout 3 of 5 requests without selector for master
- Expose `max_locks_per_transaction` property HOT 2
- replicaCount not being respect HOT 4
- Orphan cluster role postgres-pod deployed
- Consistent Crash Loops Attempting to Bootstrap Leader and Failing Replicas
- Logical backup secret results in duplicate environment keys HOT 1
- Standby replication authorization user and slot settings can't be in `postgresql.acid.zalan.do` CRD HOT 1
- Removing cluster do not removes objects from k8s HOT 2
- When we running standby cluster we must allow connection from postgres user and know it's credentials? HOT 4
- Ability to provide imagepullsecrets for postgres cluster CRD HOT 4
- pgbouncer read write in one place HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from postgres-operator.