Skip to content

Deploying feature-server using feast-operator, some securityContext have no settings #6750

Description

@RoronoaLee

Is your feature request related to a problem? Please describe.
When deploying the feature-server using the feast-operator, the generated UI, registry, and online pods do not have the securityContext settings 'AllowPrivilegeEscalation = false' and 'Capabilities.Drop=[ALL]'. The generated CronJob pods do not have the securityContext settings 'RunAsNonRoot=true' and 'SeccompRofile=RuntimeDefault'. In non-Openshift environments, the creation of RoleBinding cannot be skipped directly. Furthermore, the install.yaml cannot set these parameters at the container level. This prevents me from complying with stricter security policies in the Kubernetes cluster.

Describe the solution you'd like
If the above parameters cannot be added in the source code, can they be set in the template install.yaml of the featurestore?

Describe alternatives you've considered
modify the source code ,add the parameters and rebuild the operator image

Additional context
Our Kubernetes cluster security policy is more stringent, and containers without these settings cannot be deployed.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions