osixia
offer a rootless version
OpenLDAP does not require root priviledges for anything else then opening port below 1024
From a security standpoint it would be better to just run as an unpriviledged user e.g 1000 and use higher ports
I have an issue with the root user as well. My environment does not allow pods to be run as root and a non-root user does not seem to work.
I didn't it an issue when running on a different port but without root it does not seem to be progressing at all.
apiVersion: apps/v1\n kind: Deployment metadata: name: openldap labels: app: openldap spec: selector: matchLabels: app: openldap replicas: 1 template: metadata: labels: app: openldap spec: securityContext: runAsUser: 1000 containers: - name: openldap image: hub.visa.com/paas/openldap:1.3.0 args: ["--loglevel", "debug", "--copy-service"]
The error only gives the below
*** CONTAINER_LOG_LEVEL = 4 (debug) *** Run commands before finish... *** Killing all processes..
About the ports: It is possible to override the default ones via LDAP_PORT and LDAPS_PORT
