Skip to content

Add unprivileged configuration and tests for the Notebook operators charm #520

@dariofaccin

Description

@dariofaccin

Context

As a necessary security measure, Charmed Kubeflow is supposed to run all charms and their respective workloads as non-root users in order to prevent threats that come with root privileges.

Assuming the exploration is completed, charm needs to be configured to run rootless and proper tests need to be implemented to ensure correct privileges.

Ref: canonical/bundle-kubeflow#1368

What needs to get done

  1. Modify charm to run rootless
  2. Add proper tests to ensure correct privileges

Definition of Done

  1. Charm is run rootless
  2. Workload is run rootless
  3. CI is passing

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions