DoD-Platform-One/minio-operator

Require non root group policy now breaks console

Opened this issue · 0 comments

Bug

Description

If console is enabled in values, the replicaset never deploys the pod as it is blocked by the Kyverno require-non-root-group cpol which has recently defaulted to enforce in BB.

The values in console for the securityContext here appears to need the addition of the runAsGroup: 1000 like the operator does here. Manually applying this change to the console deployment resulted in a successful hr reconciliation.

BigBang Version

2.21.0