Skip to content

Conversation

RoddieKieley
Copy link
Contributor

The PR#1301 for #1285 set the security context for ProxyRunner deployments without taking into account kubernetes platform differences and detection as was introduced for #1063 via PR#1253.

This addresses that concern by refactoring the code dealing with security context, encapsulating that specific functionality better than was previously done for either #1063 or #1285.

Also while this should not directly impact #1483, assuming the operator was running it would have required manual changes to the MCPServer instances Deployment to remove the incorrectly set runAsUser, runAsGroup, and fsGroup values once it was so mentioning here.

I am marking this as Draft; while it works well here there is a good bit of code addition and change so having @jhrozek and/or @ChrisJBurns take a look as a follow up to #1063 is probably in order.

Feel free to modify/update as require and feedback welcome.

Copy link
Contributor

@jhrozek jhrozek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I thinks this is great, just a few questions/comments inline

@ChrisJBurns
Copy link
Collaborator

It will be so nice to do all of this code in one place when we implement #1497 😄

@RoddieKieley RoddieKieley force-pushed the issue1063-refactor-deploymentForMCPServer branch from 2961795 to f17cb67 Compare August 25, 2025 11:48
@RoddieKieley
Copy link
Contributor Author

@ChrisJBurns What's the relative order of operations here with respect to #1497? Wondering if we can get this in prior, or if we need to do #1497 first then update here? What do you think?

@RoddieKieley RoddieKieley marked this pull request as ready for review August 25, 2025 11:59
@RoddieKieley RoddieKieley force-pushed the issue1063-refactor-deploymentForMCPServer branch from f17cb67 to d4e8cce Compare August 26, 2025 11:37
Copy link
Contributor

@jhrozek jhrozek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sorry for the delay in reviewing. I like this version. It's been 2 days since the last push, so whoever wanted to add more comments had their chance.

@jhrozek jhrozek merged commit 76731f2 into stacklok:main Aug 28, 2025
20 checks passed
JAORMX pushed a commit that referenced this pull request Aug 29, 2025
… (#1500)

Signed-off-by: Roddie Kieley <[email protected]>
Co-authored-by: Cursor claude-4-sonnet <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants