-
Epic
-
Resolution: Done
-
Medium
-
None
-
None
-
Non-root user for containers
AAI pods to check:
root@kubectl:~# kubectl -n onap get pods | grep aai dev-aai-5f58b6bb4f-t774p 1/1 Running 0 29d dev-aai-babel-5767fc855c-zxkmr 2/2 Running 2 60d dev-aai-cassandra-0 1/1 Running 1 35d dev-aai-cassandra-1 1/1 Running 16 35d dev-aai-cassandra-2 1/1 Running 1 35d dev-aai-champ-f48fbb795-8bt9c 2/2 Running 2 60d dev-aai-data-router-7c549f657-tt5tv 2/2 Running 2 60d dev-aai-elasticsearch-67cfb8dfc5-p77z9 1/1 Running 1 60d dev-aai-gizmo-6c9465c596-97f4x 2/2 Running 4 60d dev-aai-graphadmin-7747f78755-nwbq6 2/2 Running 0 29d dev-aai-graphadmin-create-db-schema-4mhj9 0/1 Completed 0 60d dev-aai-graphadmin-create-db-schema-b9496 0/1 Init:Error 0 60d dev-aai-modelloader-9fdb4df5c-p9wfb 2/2 Running 4 60d dev-aai-resources-d5465675d-j655d 2/2 Running 0 29d dev-aai-search-data-bcfb67bdc-74pn8 2/2 Running 2 60d dev-aai-sparky-be-6b7d5b5dc4-dl44d 2/2 Running 0 60d dev-aai-spike-56f8768d9c-tpcnp 2/2 Running 0 29d dev-aai-traversal-bdf87969c-k6chw 2/2 Running 2 29d dev-aai-traversal-update-query-data-zsxnm 0/1 Completed 0 60d
- relates to
-
DCAEGEN2-1431 Do not run HV-VES container as root
-
- Closed
-
-
EXTAPI-202 Design container to run as non-root
-
- Closed
-
-
AAF-768
Have Containers run as non-root
-
- Closed
-
-
-
- Closed
-
-
APPC-1503
Run appc as non-root user
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
-
DCAEGEN2-1269
Run DFC docker container as a non-root user
-
- Closed
-
-
DMAAP-1137
[DR] Run DR docker containers as non root user
-
- Closed
-
-
MSB-320
Run API Gateway as a non-root user
-
- Closed
-
-
MSB-321
Run Discovery as a non-root user
-
- Closed
-
-
MSB-322
Run Kube2msb as a non-root user
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
-
OOM-928 Some charts use /dockerdata-nfs by default
-
- Closed
-
-
SDC-2138
SDC docker runs as non root
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
-
VVP-175
Ensure VVP Docker Image Does Not Run as Root
-
- Closed
-
-
REQ-215
Containers configured per secure recommendation
-
- To Do
-
-
AAI-2822
Containers should not run by default as root
-
- Closed
-
- mentioned in
-
Page Loading...
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-