Skip to content

Use Watcher user for the dbsync job#407

Open
amoralej wants to merge 1 commit into
openstack-k8s-operators:mainfrom
amoralej:dbsync-user
Open

Use Watcher user for the dbsync job#407
amoralej wants to merge 1 commit into
openstack-k8s-operators:mainfrom
amoralej:dbsync-user

Conversation

@amoralej

@amoralej amoralej commented Jul 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Currently, the dbsync job pod is running as root which is not required and against the minimum privilege principle.

This patch switches the dbsync job to use the Watcher user id.

@openshift-ci
openshift-ci Bot requested review from SeanMooney and raukadah July 24, 2026 07:08
@openshift-ci

openshift-ci Bot commented Jul 24, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign seanmooney for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@centosinfra-prod-github-app

centosinfra-prod-github-app Bot commented Jul 24, 2026

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/b95bfe8e370747d2b897ad00f4c28c56

✔️ openstack-meta-content-provider-master SUCCESS in 2h 24m 23s
❌ watcher-operator-validation-master FAILURE in 1h 46m 39s
❌ openstack-meta-content-provider-epoxy FAILURE in 15m 39s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-18 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
❌ watcher-operator-kuttl FAILURE in 1h 32m 26s

@amoralej
Use Watcher user for the dbsync job
b4f3808 
Currently, the dbsync job pod is running as root which is not required
and against the minimum privilege principle.

This patch switches the dbsync job to use the Watcher user id.

Signed-off-by: Alfredo Moralejo <amoralej@redhat.com>
@centosinfra-prod-github-app

centosinfra-prod-github-app Bot commented Jul 24, 2026

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/80109091e2c34f579a5e8e154c4916f0

✔️ openstack-meta-content-provider-master SUCCESS in 2h 53m 41s
✔️ watcher-operator-validation-master SUCCESS in 2h 13m 29s
❌ openstack-meta-content-provider-epoxy FAILURE in 16m 23s
⚠️ watcher-operator-validation-epoxy SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
⚠️ watcher-operator-validation-epoxy-ocp4-18 SKIPPED Skipped due to failed job openstack-meta-content-provider-epoxy
✔️ noop SUCCESS in 0s
✔️ watcher-operator-kuttl SUCCESS in 57m 24s

@amoralej

amoralej commented Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

check-rdo

1 similar comment
@amoralej

amoralej commented Jul 25, 2026

Copy link
Copy Markdown
Contributor Author

check-rdo

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@raukadah raukadah Awaiting requested review from raukadah
@SeanMooney SeanMooney Awaiting requested review from SeanMooney

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@amoralej