[
https://issues.apache.org/jira/browse/HDDS-1712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16887414#comment-16887414
]
Elek, Marton commented on HDDS-1712:
------------------------------------
Very good question, but I am afraid that this discussion is slightly diverged.
I am not sure if this is the best place to discuss how ozone can be used in k8s.
I can confirm that it's possible to run multiple datanodes with the help of k8s
example files (So the previous statement was not true about replication factor
1)
{code}
NAME READY STATUS RESTARTS AGE
datanode-0 1/1 Running 0 7h57m
datanode-1 1/1 Running 0 7h57m
datanode-2 1/1 Running 0 7h57m
datanode-3 1/1 Running 0 7h57m
datanode-4 1/1 Running 0 7h57m
datanode-5 1/1 Running 2 7h57m
datanode-6 1/1 Running 0 7h57m
datanode-7 1/1 Running 0 7h57m
datanode-8 1/1 Running 0 7h57m
datanode-9 1/1 Running 20 7h57m
{code}
If you think it's a bug, please open a new issue.
If you are not sure if it's a bug or in a problem in your environment, please
start a discussion on the user mailing list.
And you can also ping me offline and I would be happy to help to start it in
your environment. The ozone community meetings are also good places to ask such
questions where I am also there and open to help to solve your problems.
> Remove sudo access from Ozone docker image
> ------------------------------------------
>
> Key: HDDS-1712
> URL: https://issues.apache.org/jira/browse/HDDS-1712
> Project: Hadoop Distributed Data Store
> Issue Type: Bug
> Reporter: Eric Yang
> Assignee: Eric Yang
> Priority: Major
> Labels: pull-request-available
> Attachments: HDDS-1712.001.patch
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Ozone docker image is given unlimited sudo access to hadoop user. This poses
> a security risk where host level user uid 1000 can attach a debugger to the
> container process to obtain root access.
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
