Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSC 23.2 - pod is in CrashLoopBackOff status because of this permission issue : mktemp: failed to create file via template ‘/app/etc/passwd.XXXXXXXXX’: Permission denied #33

Open
justBeroe opened this issue Aug 30, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@justBeroe
Copy link

Current Behavior

After performing helm upgrade to SSC 23.2 with user: uid: 1111 gid:1 [0 not permitted in our organization], the following error appears: ---> mktemp: failed to create file via template ‘/app/etc/passwd.XXXXXXXXX’: Permission denied

drwxrwx--- 2 root root 4096 Aug 30 07:45 etc

It looks like users do not have any read, write or execute on this folder /app/etc

Expected Behavior

mktemp: failed to create file via template ‘/app/etc/passwd.XXXXXXXXX’: Permission denied should not appear when doing SSC helm upgrade with user: uid: 1111 gid: 1 [gid cannot be 0 in our policy [is not allowed]]

Please provide a way to fix in chart or image. Do we have Dockerfile to modify it? Thank you.

Steps To Reproduce

bash-5.1$ pwd
/app
bash-5.1$ ls -la
drwxrwx--- 2 root root 4096 Aug 30 07:45 etc
bash-5.1$ chown :1 etc/
chown: changing group of 'etc/': Operation not permitted
bash-5.1$ chmod g+rwx etc/
chmod: changing permissions of 'etc/': Operation not permitted
bash-5.1$ whoami
fortify

Environment

SSC 23.2.0.0154

bash-5.1$ cat version.properties
previous =
installed = 23.2.0.0154

Anything else?

No response

@justBeroe justBeroe added the bug Something isn't working label Aug 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant