-
Story
-
Resolution: Duplicate
-
High
-
Frankfurt Release
-
None
Some Multicloud pods are still run as root, which is a critical security issue.
POD: onap-multicloud-fcaps-f84c74874-dftkm container: rabbit-mq uid: 0(root)
POD: onap-multicloud-k8s-etcd-0 container: onap-multicloud-k8s-etcd uid: 0(root)
POD: onap-multicloud-k8s-mongo-0 container: multicloud-k8s-mongo uid: 0(root)
They must be run using a non root user.
It has been discussed during the PTL meetings.
It can be fixed by modifying the docker you generate. The VID can be used as an illustration. The fix is light and shall be applied as soon as possible.