OPSEXP-2411 Drop privileged for traefik containers #1213

gionn · 2024-10-03T09:22:24Z

Fix privileged requirement due to podman selinux restrictions
- Drop selinux labeling to allow accessing /var/run/docker.sock under podman
Fix pre-release still including old acs-nginx
Drop deprecated version tag
Exclude kics findings for known issues which are fine for testing environments

… versions

gionn added 2 commits October 3, 2024 11:17

Drop privileged for traefik containers

dabf69a

Dropping compose version which is completely ignored by newer compose…

57f747a

… versions

gionn self-assigned this Oct 3, 2024

This comment was marked as outdated.

Sign in to view

fixup pre-release

f935dfa

gionn force-pushed the OPSEXP-2411-no-privileged branch from 0696ad1 to 3db6f86 Compare October 3, 2024 10:49

kics exclude-queries

f7f338c

gionn force-pushed the OPSEXP-2411-no-privileged branch from 3db6f86 to f7f338c Compare October 3, 2024 10:51

gionn requested review from alxgomz and pmacius October 3, 2024 10:53

gionn added 3 commits October 3, 2024 12:54

pin traefik to latest 3.1

efa2102

add notice

67c051d

kics exclude-queries

c9c6116

gionn force-pushed the OPSEXP-2411-no-privileged branch from c7ab50b to c9c6116 Compare October 3, 2024 11:02

fix restart on-failure check

f10ec22

gionn marked this pull request as ready for review October 3, 2024 11:07

pmacius approved these changes Oct 3, 2024

View reviewed changes

alxgomz approved these changes Oct 3, 2024

View reviewed changes

gionn merged commit b71f71b into master Oct 3, 2024
12 checks passed

gionn deleted the OPSEXP-2411-no-privileged branch October 3, 2024 14:16

Provide feedback