Helm Changes
- Add a new field
global.securitySettings.floatingUserId
to the Gloo Helm chart that when set totrue
has the same effect as settingfloatingUserId=true
for all deployment-specificfloatingUserId
s, as well as settingdiscovery.deployment.enablePodSecurityContext=false
and gatewayProxies.gatewayProxy.podTemplate.enablePodSecurityContext=false`to allow for easy OpenShift deployment. The global value will override any local settings. (#5034)
Fixes
- Provide a Helm field
global.securitySettings.floatingUserId
to apply floatingUserId logic, which unsetsrunAsUser
for security contexts, for all deployments in the Gloo Helm chart. The global field will also cause templates to be rendered as if deployments with "enablePodSecurityContextfields have their value set to
falseto allow for easy OpenShift deployment. This functionality has also been added to Gloo Gateway via the GatewayParameters resource. If
floatingUserId` is set in GatewayParameters, it will be applied to all deployments in the Gloo Gateway Helm chart, unless a deployment-specific value is set. (#5034)