Skip to content

Allow setting hostUsers on deployment#1978

Open
jnoordsij wants to merge 1 commit into
bitnami:mainfrom
jnoordsij:patch-1
Open

Allow setting hostUsers on deployment#1978
jnoordsij wants to merge 1 commit into
bitnami:mainfrom
jnoordsij:patch-1

Conversation

@jnoordsij

Copy link
Copy Markdown
Contributor

Description of the change

As of Kubernetes 1.36, the User Namespaces feature has graduated to stable; see also https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/.

To leverage this on pods, one needs to set the hostUsers flag on a deployment. This MR adds the ability to add such a flag to this chart. See also https://kubernetes.io/docs/tasks/configure-pod-container/user-namespaces/.

Benefits

Allowing deployment to run with user namespaces, increasing (theoretical) security level.

Possible drawbacks

None

Applicable issues

n/a

Additional information

n/a

@github-actions

Copy link
Copy Markdown
Contributor

This Pull Request has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thank you for your contribution.

@github-actions github-actions Bot added the Stale label Jun 14, 2026
@alvneiayu alvneiayu removed the Stale label Jun 14, 2026

@alvneiayu alvneiayu left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

First of all, thanks a lot for your contribution.

I reviewed the PR, could you take it a look the comment, please?

Thanks again

Álvaro

Comment thread helm/sealed-secrets/templates/deployment.yaml
Signed-off-by: Jenthe Noordsij <45041769+jnoordsij@users.noreply.github.com>
@jnoordsij

Copy link
Copy Markdown
Contributor Author

Thanks for the review; I've adjusted to include a proposed (default) value in the values file and add the flag to the README.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants