Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permission issues on EKS #464

Open
simar7 opened this issue Sep 16, 2022 · 3 comments
Open

Permission issues on EKS #464

simar7 opened this issue Sep 16, 2022 · 3 comments
Labels

Comments

@simar7
Copy link
Member

simar7 commented Sep 16, 2022

Description

A user reported permission issues when running on EKS. See screenshot below for details.

What did you expect to happen?

No permission issues

What happened instead?

image

Output of run with POSTEE_DEBUG=true:

No response

Additional details (environment setup, networking info...):

EKS cluster 1.20 version
Deployed using helm chart with FluxCD 0.33.0

@grglzrv
Copy link
Contributor

grglzrv commented Sep 23, 2022

Fixed by adding podSecurityContext: fsGroup: 1099 It should be activated by default
https://github.com/aquasecurity/postee/blob/main/deploy/helm/postee/values.yaml#L37-L46

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099

image

@simar7
Copy link
Member Author

simar7 commented Sep 23, 2022

Fixed by adding podSecurityContext: fsGroup: 1099 It should be activated by default https://github.com/aquasecurity/postee/blob/main/deploy/helm/postee/values.yaml#L37-L46

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099
image

thanks for looking into this @grglzrv - are you suggesting the values should be set to default as the following?

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099

@simar7 simar7 added the bug label Sep 23, 2022
@grglzrv
Copy link
Contributor

grglzrv commented Sep 23, 2022

yes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants