Skip to content

Operator chart start using hostUsers #761

@jcpunk

Description

@jcpunk

Is your feature request related to a problem? Please describe.
Kubernetes 1.33+ offers user namespaces which further isolates users from the system and other pods on the same host.

Describe the solution you'd like
I'd like cnpg operator chart to start with an "opt-in" flag where folks could start deploying with hostUsers: false via helm. Eventually it would be nice to shift this to an "opt-out" flag once kubernetes 1.32 is no longer on the support matrix for external-secrets.

Note: hostUsers: false doesn't work with kind.

I'm asking about the operator chart, not the pods created by the operator itself.

Describe alternatives you've considered
Patching the resources with Kustomize.

Additional context
https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions