HoustonPutman commented on issue #264: URL: https://github.com/apache/solr-operator/issues/264#issuecomment-880013205
@thomaswoeckinger I'm working on the custom `serviceAccountName` now, and that is very straightforward. > This makes it impossible to run on OKD, because default security constraints deny the usage of fsGroup 8983. This might be harder to fix. The reason we use fsGroup 8983 is because the Solr docker image uses the [8983 user](https://github.com/docker-solr/docker-solr/blob/master/8.9/Dockerfile#L26) to [own `/var/solr`](https://github.com/docker-solr/docker-solr/blob/master/8.9/Dockerfile#L112) (the data directory) I might be wrong here, but I believe that's why it was `fsGroup` has always been set to 8983. We can definitely look at changing that in the future, I want the solr-operator to be fully OKD compatible, but it will be more work than making the serviceAccountName configurable. Are you able to get OKD to work with the 8983 `fsGroup` with a custom service account? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org
