Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Appsmith-EE helm chart refers to non-existing non-root user and group #38787

Open
1 task done
ssichynskyi opened this issue Jan 21, 2025 · 0 comments
Open
1 task done
Assignees
Labels
Bug Something isn't working Community Reported issues reported by community members DevOps Pod Issues related to devops K8s Kubernetes related issues Medium Issues that frustrate users due to poor UX Needs Triaging Needs attention from maintainers to triage Production

Comments

@ssichynskyi
Copy link

Is there an existing issue for this?

  • I have searched the existing issues

Description

In Appsmith-EE values.yaml there are 2 blocks instructing the user on how to run under non-root:

podSecurityContext: {}
  # For non-root user
  #  fsGroup: 1001
  #  sysctls:
  #  - name: net.ipv4.ip_unprivileged_port_start
  #    value: "80"
securityContext: {}
  # For non-root user
  # runAsNonRoot: true
  # runAsUser: 1000

When I uncomment them and use like this:

    # ....
    helm:
      releaseName: appsmith-ee
      values: |-
        # ....
        podSecurityContext:
          fsGroup: 1001
          sysctls:
          - name: net.ipv4.ip_unprivileged_port_start
            value: "80"
        securityContext:
          runAsNonRoot: true
          runAsUser: 1000

However has nor /etc/passwd on appsmith container is not aware about user with ID 1000.
When SSH in appsmith, the prompt is as follows:

groups: cannot find name for group ID 1001
I have no name!@appsmith-ee-0:/opt/appsmith$ ...

Steps To Reproduce

  1. Deploy the Appsmith-EE on k8s using the most recent helm chart (3.6.0) using abovementioned configs
  2. SSH into the appsmith pod

Public Sample App

No response

Environment

Production

Severity

Medium (Frustrating UX)

Issue video log

No response

Version

Helm chart 3.6.0.

@ssichynskyi ssichynskyi added Bug Something isn't working Needs Triaging Needs attention from maintainers to triage labels Jan 21, 2025
@Nikhil-Nandagopal Nikhil-Nandagopal added Community Reported issues reported by community members Medium Issues that frustrate users due to poor UX Production K8s Kubernetes related issues labels Jan 21, 2025
@github-actions github-actions bot added the DevOps Pod Issues related to devops label Jan 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Something isn't working Community Reported issues reported by community members DevOps Pod Issues related to devops K8s Kubernetes related issues Medium Issues that frustrate users due to poor UX Needs Triaging Needs attention from maintainers to triage Production
Projects
None yet
Development

No branches or pull requests

5 participants