[Feature] Ability to specify the securityContext for the MariaDB instance pod about mariadb-operator HOT 3 CLOSED

Thanks for the quick response, I tested the new feature and it works well ! 👍

As a side not for anyone who might end up on this issue, you don't want to use EFS for MariaDB storage but EBS instead. EFS being a network file system it is too slow for MariaDB.

from mariadb-operator.

Hey @Vidalee !

Totally agreed! We are missing this feature. We could support both the podSecurityContext (Pod level) and securityContext (container level):

apiVersion: mariadb.mmontes.io/v1alpha1
kind: MariaDB
metadata:
  name: mariadb
spec:
...
  podSecurityContext:
     fsGroup: 1
     runAsNonRoot: true
  securityContext:
     allowPrivilegeEscalation: false
     capabilities:
       drop:
        - ALL
     readOnlyRootFilesystem: true
     runAsNonRoot: true
... 

This will be supported in the following release.

Thanks! 🙏🏻

from mariadb-operator.

Hey @Vidalee !

This has been implemented an will be released in the v0.0.10 version:

• https://github.com/mmontes11/mariadb-operator/blob/main/config/samples/mariadb_v1alpha1_mariadb.yaml#L55..L59

However, I found myself struggling to not run as root using the default image (oficial MariaDB image), you may specify a different one, it's supported by the operator:

• https://github.com/mmontes11/mariadb-operator/blob/main/config/samples/mariadb_v1alpha1_mariadb.yaml#L16..L19

Thanks!

from mariadb-operator.