linkerd
/
linkerd2
mirror of https://github.com/linkerd/linkerd2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
linkerd2/controller/proxy-injector/fake/data
History
Christian Schlotter 98533538e6
Allow proxy-init container to run as non-root (#7162) 
Linkerd proxy-init container is currently enforced to run as root.

Removes hardcoding `runAsNonRoot: false` and `runAsUser: 0`. This way
the container inherits the user ID from the proxy-init image instead which
may allow to run as non-root.

Fixes #5505

Signed-off-by: Schlotter, Christian <christian.schlotter@daimler.com>
 		2021-11-05 10:44:32 -05:00
..
annotation.patch.json Add opaque ports namespace inheritance to pods (#5941) 2021-03-29 19:41:15 -04:00
deployment-inject-disabled.yaml Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
deployment-with-injected-proxy.yaml docker: Access container images via cr.l5d.io (#5756) 2021-02-17 14:31:54 -08:00
filter-pod-opaque-ports.yaml Filter default opaque ports for pods and services (#6774) 2021-08-31 16:11:42 -06:00
filter-service-opaque-ports.yaml Filter default opaque ports for pods and services (#6774) 2021-08-31 16:11:42 -06:00
filtered-pod-opaque-ports.json Filter default opaque ports for pods and services (#6774) 2021-08-31 16:11:42 -06:00
filtered-service-opaque-ports.json Filter default opaque ports for pods and services (#6774) 2021-08-31 16:11:42 -06:00
inject-init-container-spec.yaml Allow proxy-init container to run as non-root (#7162) 2021-11-05 10:44:32 -05:00
inject-linkerd-secrets-volume-spec.yaml Have the Webhook react to pod creation/update only (#2472) 2019-03-26 11:53:56 -05:00
namespace-inject-disabled.yaml Update auto-injector to require opt-in by namespace or pod (#2209) 2019-02-06 17:37:14 -08:00
namespace-inject-enabled.yaml Update auto-injector to require opt-in by namespace or pod (#2209) 2019-02-06 17:37:14 -08:00
namespace-with-opaque-ports.yaml Add services to proxy injector for opaque ports annotation (#5766) 2021-02-17 20:58:18 -05:00
pod-inject-empty.yaml Enhance webhook unit tests by checking returned JSON patch (#2615) 2019-04-03 15:39:27 -05:00
pod-inject-enabled.yaml Set `LINKERD2_PROXY_INBOUND_PORTS` during injection (#6445) 2021-07-09 11:52:20 -05:00
pod-with-debug-disabled.yaml Set `LINKERD2_PROXY_INBOUND_PORTS` during injection (#6445) 2021-07-09 11:52:20 -05:00
pod-with-debug-enabled.yaml Set `LINKERD2_PROXY_INBOUND_PORTS` during injection (#6445) 2021-07-09 11:52:20 -05:00
pod-with-debug.patch.json Allow proxy-init container to run as non-root (#7162) 2021-11-05 10:44:32 -05:00
pod-with-ns-annotations.patch.json Allow proxy-init container to run as non-root (#7162) 2021-11-05 10:44:32 -05:00
pod-with-opaque-ports.yaml Add opaque ports namespace inheritance to pods (#5941) 2021-03-29 19:41:15 -04:00
pod-without-opaque-ports.yaml Add opaque ports namespace inheritance to pods (#5941) 2021-03-29 19:41:15 -04:00
pod.patch.json Allow proxy-init container to run as non-root (#7162) 2021-11-05 10:44:32 -05:00
service-with-opaque-ports.yaml Add services to proxy injector for opaque ports annotation (#5766) 2021-02-17 20:58:18 -05:00
service-without-opaque-ports.yaml Add services to proxy injector for opaque ports annotation (#5766) 2021-02-17 20:58:18 -05:00