coder

mirror of https://github.com/coder/coder.git synced 2025-03-14 10:09:57 +00:00

History

Andrey f65051966c feat: add run_as_non_root=True to Kubernetes Starter template (#16512 )

This document sounds like `run_as_non_root=True` should be enabled for
workspaces.

https://coder.com/docs/install/kubernetes#kubernetes-security-reference
> All containers must run as non-root user
>  - Control plane - ...
> - Workspaces - Workspace pod UID is [set in the Terraform template
here](f57ce97b5a/examples/templates/kubernetes/main.tf (L274-L276)),
and are not required to run as root.

Administrators of the Kubernetes of a cluster I am working on have added
a security check on it, and prevent creating pods, without
`run_as_non_root=True`. So, I need to set it every time I create a
template.

According to the docs used with `run_as_user=1000` it should not have
negative effects and could be safely added.
https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.26/

2025-02-12 10:58:33 -05:00

jfrog

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831 )

2025-01-03 13:12:59 +00:00

lima

chore: update docs links (#14221 )

2024-08-17 11:51:13 +00:00

monitoring/dashboards/grafana

chore: use tabs for prettier and biome (#14283 )

2024-08-15 14:53:53 -06:00

parameters

fix(examples): add keep_locally to docker_image resources (#16012 )