I have a PR open with this change:

https://github.com/openshift/openshift-ansible/pull/8558/files

cc Scott

On Tue, May 29, 2018 at 9:15 AM, Vyacheslav Semushin <vsemu...@redhat.com>
wrote:

> 2018-05-17 15:15 GMT+02:00 Sam Padgett <spadg...@redhat.com>:
>
>> The file mode is 400, and I think anyuid breaks reading it since the user
>> changes.
>>
>> https://github.com/openshift/openshift-ansible/blob/master/r
>> oles/openshift_web_console/files/console-template.yaml#L90
>>
>> The console doesn't need anyuid... I'm not sure what's adding it.
>>
>
> Thinking a bit more about this, I can say, that webconsole can be
> improved. While it doesn't need root privileges it still needs a "stable"
> UID and it doesn't expect that this UID can be changed.
>
> Would it be possible to, follow our own recommendations, and use 040 mode
> instead? Using group will give us more predictable results, because all
> pods always have root group.
>
> --
> Slava Semushin | OpenShift
>
_______________________________________________
dev mailing list
dev@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/dev

Reply via email to