cert-manager-webhook-scaleway icon indicating copy to clipboard operation
cert-manager-webhook-scaleway copied to clipboard

Issue with cert-manager-webhook-scaleway when run as non root is set to true

Open christian-vdz opened this issue 1 year ago • 1 comments

Is your feature request related to a problem? Please describe. With securityContext.runAsNonRoot set to true on Helm release, this error occured: Error: container has runAsNonRoot and image will run as root.

It does not stop the container from starting but the lack of permissions prevents port 443 to be bound: "error executing command" err="failed to create listener: failed to listen on 0.0.0.0:443: listen tcp 0.0.0.0:443: bind: permission denied" logger="cert-manager"

Describe the solution you'd like I don't know what the best solution is but I think we should create a new user which is allowed to create listeners.

christian-vdz avatar May 21 '24 13:05 christian-vdz

can you try with listenPort: 8443 with the version 0.4 of the chart ? https://github.com/scaleway/helm-charts/blob/master/charts/scaleway-certmanager-webhook/values.yaml#L62

it should be possible with https://github.com/scaleway/helm-charts/pull/20

nox-404 avatar Oct 16 '24 12:10 nox-404