postee icon indicating copy to clipboard operation
postee copied to clipboard

Published 20 hours ago • verified publisher icon aquasecurity

Permission issues on EKS

Open simar7 opened this issue 1 year ago • 3 comments

Description

A user reported permission issues when running on EKS. See screenshot below for details.

What did you expect to happen?

No permission issues

What happened instead?

image

Output of run with POSTEE_DEBUG=true:

No response

Additional details (environment setup, networking info...):

EKS cluster 1.20 version Deployed using helm chart with FluxCD 0.33.0

simar7 avatar Sep 16 '22 17:09 simar7

Fixed by adding podSecurityContext: fsGroup: 1099 It should be activated by default https://github.com/aquasecurity/postee/blob/main/deploy/helm/postee/values.yaml#L37-L46

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099
image

grglzrv avatar Sep 23 '22 12:09 grglzrv

Fixed by adding podSecurityContext: fsGroup: 1099 It should be activated by default https://github.com/aquasecurity/postee/blob/main/deploy/helm/postee/values.yaml#L37-L46

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099
image

thanks for looking into this @grglzrv - are you suggesting the values should be set to default as the following?

    podSecurityContext:
      fsGroup: 1099
    securityContext:
      runAsUser: 1099
      runAsGroup: 1099

simar7 avatar Sep 23 '22 22:09 simar7

yes

grglzrv avatar Sep 23 '22 23:09 grglzrv