Run containers as non-root by default about tyk-helm-chart HOT 5 CLOSED

@sedkis Not directly related in this case.

Kubernetes abstracts the actual runtime (could be Docker Engine, CRI-O, containerd, etc). This task is to set the context for k8s as to how it should run the containers, whichever the actual runtime.

The Helm charts have not much to do over choosing this or that runtime (or at least shouldn't in the general case).

As a side note, with podman, when running in rootless mode you'd still need to make sure that the container is actually able to do that (i.e. not using any system tools/features that require root) or it'll fail.

from tyk-helm-chart.

@excieve I wonder how this plays with Podman, since it is designed to run containers non-root? Would doing a simple substitute for Docker to Podman achieve the same behaviour?

from tyk-helm-chart.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs, please comment if you would like this issue to remain open. Thank you for your contributions.

from tyk-helm-chart.

This is not stale.

from tyk-helm-chart.

This is now implemented in this PR:#76

from tyk-helm-chart.