All containers must run as non-root user

Description

 Description of Use Case / Requirement:

 This effort has been started in F with ONAP containers. Now we want to extend this to all containers that are deployed as a part of OOM.

Owners (one of these should be the Assignee - use @ notation):

 

Link to HLD/LLD (if any):

 

Dependency Relationships with Other Projects:

 

Project Impact (Test Only (TO), Code (C)):

 

Support Status for each Affected Project (Supported (S); Partially Supported (P); Not Supported (N)):

Note: for any affected projects labeled 'P' or 'N', please document the resulting gaps.

 

Integration Leads (use @ notation): 

 

Company Engagement: Samsung, Orange

 

100% Done
Loading...

Activity

Show:

Former user December 1, 2020 at 10:47 AM

Except of:

  1. Projects in maintenance mode for Guilin
    aaf
    aai-elasticsearch #
    aai-search-data #
    aai-sparky-be #
    music # MUSIC-609

  1. waivers requested
    dcae-cloudify #
    multicloud-k8s # MULTICLOUD-1201

  2. Upstream components
    cassandra # OOM-2552
    awx # used for use cases
    netbox # used for use cases
    robot # use for test cases + refactoring planned in Honolulu
    portal-cassandra # PORTAL-1001 task moved to Honolulu
    multicloud-fcaps # rabbit-mq
    clamp-mariadb # OOM-2552

all other pods run as non-root which is a huge achievement!

Former user October 19, 2020 at 11:40 PM

— TSC RC0 Approval : GO —
Congratulations

Former user October 19, 2020 at 7:48 AM

We are almost there. The tests should pass today but it would be good to finish the update of consul base image so that we can eliminate this exception in number of projects

Former user October 12, 2020 at 6:46 PM

Please complete the RC0 scorecard for this issue.

Former user September 17, 2020 at 4:25 PM

— TSC M4 Approval : GO —

Done

Details

Assignee

Reporter

Requirement Type

Non-Functional Requirement (DEPRECATED)

TSC Priority

1

Arch Review

Not yet performed

Scope Status

Original Scope

T-Shirt Size

M

M1 Approval

GO

M2/3 Scorecard

Green

M2/3 Approval

GO

M4 Scorecard

Yellow

M4 Approval

GO

RC0 Scorecard

Yellow

RC0 Approval

GO

Fix versions

Priority

Epic Name

Created May 27, 2020 at 4:12 PM
Updated December 1, 2020 at 10:47 AM
Resolved December 1, 2020 at 10:47 AM