Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run the jaeger-agent as a non-root user by default #2460

Closed
chgl opened this issue Sep 9, 2020 · 0 comments · Fixed by #2466
Closed

Run the jaeger-agent as a non-root user by default #2460

chgl opened this issue Sep 9, 2020 · 0 comments · Fixed by #2466
Labels

Comments

@chgl
Copy link
Contributor

chgl commented Sep 9, 2020

Requirement - what kind of business use case are you trying to solve?

I am trying to run the jaeger-agent container in a Kubernetes cluster with strict Pod Security Policies set, which requires all containers to run as non-root users.

Problem - what in Jaeger blocks you from solving the requirement?

The Jaeger-agent container runs as root by default (https://github.com/jaegertracing/jaeger/blob/master/cmd/agent/Dockerfile).

Proposal - what do you suggest to solve the problem or improve the existing situation?

Update the Dockerfile to explicitely set a non-root USER. There's also some open discussion about this over at the Helm chart repo: jaegertracing/helm-charts#41

I would suggest adding a USER directive to the end of the Dockerfile, setting the running user id to 10001. I can create a PR for this.

Any open questions to address

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants