Comments (2)
To accommodate the non root uids, one can allow the slightly lower SCC nonroot-v2
for the target namespace service account.
However, alfresco-content-services
container in alfresco-cs-share deployment still fails due to a denied root privilege.
Using default SCC anyuid
with all security implications let the pod run without permission issue.
By the way, the (first?) permission issue in the container, if run without root privilege, is:
Replace 'REPO_HOST' with 'alfresco-alfresco-cs-repository' and 'REPO_PORT' with '80'
sed: couldn't open temporary file /usr/local/tomcat/shared/classes/alfresco/web-extension/sedubFq2G: Permission denied
from acs-deployment.
Replace 'REPO_HOST' with 'alfresco-alfresco-cs-repository' and 'REPO_PORT' with '80'
sed: couldn't open temporary file /usr/local/tomcat/shared/classes/alfresco/web-extension/sedubFq2G: Permission denied
ok this is actually the issue we are already aware of (internally tracked as APPS-1832
) for which we don't really have any workaround yet.
from acs-deployment.
Related Issues (20)
- Alfresco Engine Container High Throughput HOT 2
- Issue with Sharing PVCs in ACS Community HOT 7
- ReplicaCount 2 Filestore HOT 2
- Do not create sample data
- Helm deployment Error HOT 3
- Can't deploy ACS with helm chart on kubernetes 1.25 cluster HOT 4
- User search failed in Share HOT 1
- Setting database to external is trying to use the capabilities from a dependency Postgresql chart HOT 6
- 5.4.0-SNAPSHOT is failing installing due to search dependency helper HOT 3
- Repostiory extraVolumeMounts is never used in the REPO deployment HOT 4
- Issue with community docker-compose and jceks keystore HOT 1
- Image pull failed for alfresco-search-service HOT 5
- Problem with external NFS data when volume data alfready exist HOT 4
- Problem connecting to oracle 19c database HOT 1
- adding pod annotations to the Repo Deployment HOT 1
- Possible path traversal vulnerability on Share container HOT 4
- solr6's schema.xml always rollback to the original HOT 2
- Creating renditions for previous versions broke the restore operation HOT 3
- Configure alfresco-global.properties file using helm HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from acs-deployment.