-
Notifications
You must be signed in to change notification settings - Fork 353
Description
Is your feature request related to a problem? Please describe.
Starting with Kubernetes 1.33, user namespaces are now enabled by default. We want to enable this feature for as many pods as possible.
Describe the solution you'd like
It would be great if a) the helm chart of the operator would allow us to toggle .spec.hostUsers to false and b) if all custom resources managed by the operator would allow similar capabilities, e.g. the SyslogNGConfig resource is missing the hostUsers field in its spec.statefulSet.spec.template.spec struct.
Describe alternatives you've considered
We currently apply a patch on top of the operator deployment to enable user namespaces just for the operator. We have no solution (yet) for the custom resources managed by the operator.
Additional context