4 ms·
Docker sock is being mounted from the host [1]. This could be a concern if you are running multi-tenant apps etc. One (slightly hacky) workaround is to have a P
by tirumaraiselvan 9y ago
Docker sock is being mounted from the host [1]. This could be a concern if you are running multi-tenant apps etc. One (slightly hacky) workaround is to have a Persistent Volume mount the hostPath and restrict hostPath mounting in the pod through PSPs.
[1] https://github.com/hasura/gitkube/blob/7d0e7f25b811d48089b788593fabf7dd092b0687/manifests/gitkube-setup.yaml#L93 https://github.com/hasura/gitkube/blob/7d0e7f25b811d48089b78...