Skip to content

Add securityContext to Smart Gateway deployment#200

Open
danpawlik wants to merge 1 commit into
infrawatch:stable-1.5from
danpawlik:add-securityContext-1.5
Open

Add securityContext to Smart Gateway deployment#200
danpawlik wants to merge 1 commit into
infrawatch:stable-1.5from
danpawlik:add-securityContext-1.5

Conversation

@danpawlik

Copy link
Copy Markdown
Member

Enforce least-privilege by running as non-root, dropping all capabilities, enabling read-only root FS and RuntimeDefault seccomp profile.
That change improves OpenShift SCC compliance.

(cherry picked from commit 1675511)

Enforce least-privilege by running as non-root, dropping all
capabilities, enabling read-only root FS and RuntimeDefault
seccomp profile.
That change improves OpenShift SCC compliance.

Signed-off-by: Daniel Pawlik <dpawlik@redhat.com>
(cherry picked from commit 1675511)
@danpawlik danpawlik requested a review from a team July 15, 2026 05:42
@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/a30838abf7e345ecba59d5376ff0ae56

✔️ stf-crc-ocp_418-local_build SUCCESS in 49m 20s
✔️ stf-crc-ocp_420-local_build SUCCESS in 56m 12s
✔️ stf-crc-ocp_418-local_build-index_deploy SUCCESS in 56m 27s
✔️ stf-crc-ocp_420-local_build-index_deploy SUCCESS in 53m 52s
stf-crc-ocp_418-nightly_bundles-index_deploy RETRY_LIMIT in 5m 17s
✔️ stf-crc-ocp_420-nightly_bundles-index_deploy SUCCESS in 46m 01s
stf-crc-ocp_418-catalog_deploy RETRY_LIMIT in 5m 42s
✔️ stf-crc-ocp_420-catalog_deploy SUCCESS in 42m 55s

@danpawlik

Copy link
Copy Markdown
Member Author

recheck

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant