-
Bug
-
Resolution: Done
-
High
-
Frankfurt Release
Some MSB pods are still run as root, which is a critical security issue.
POD: onap-kube2msb-575c767f95-tpk7k container: kube2msb uid: 0(root)
POD: onap-msb-consul-85448fd8db-cl6lh container: msb-consul uid: 0(root)
They must be run using a non root user.
It has been discussed during the PTL meetings.
It can be fixed by modifying the docker you generate. The VID can be used as an illustration. The fix is light and shall be applied as soon as possible.