You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In environments with heightened security runtimes for container platforms, running the demo applications from containers with writable root filesystems on the container presents a problem due to security concerns which in turn makes it more difficult to use the demo application as a showcase for OpenTelemetry.
Describe the solution you'd like:
We would like to have exposed either configuration options and/or instructions on best practices to be able to run the demo app on a container platform (such as Kubernetes) with the option to enable a read-only root filesystem for the demo app containers. This would make the demo application much easier to adopt in environments with restricted security runtimes where the use of the root filesystem on containers is prohibited and instead temporary filesystems (e.g., ephemeral volumes) need to be used.
Describe alternatives you've considered.
N/A
Additional Context
N/A
The text was updated successfully, but these errors were encountered:
Feature Request
Is your feature request related to a problem?
In environments with heightened security runtimes for container platforms, running the demo applications from containers with writable root filesystems on the container presents a problem due to security concerns which in turn makes it more difficult to use the demo application as a showcase for OpenTelemetry.
Describe the solution you'd like:
We would like to have exposed either configuration options and/or instructions on best practices to be able to run the demo app on a container platform (such as Kubernetes) with the option to enable a read-only root filesystem for the demo app containers. This would make the demo application much easier to adopt in environments with restricted security runtimes where the use of the root filesystem on containers is prohibited and instead temporary filesystems (e.g., ephemeral volumes) need to be used.
Describe alternatives you've considered.
N/A
Additional Context
N/A
The text was updated successfully, but these errors were encountered: