Description
On OpenShift, it shouldn't be necessary for the user to add 'anyuid' permissions to SA that will be running APISIX.
The issues that are currently solved by using anyuid (#10480, #11425) are most likely due to /usr/local/apisix being owned by apisix:apisix (uid 636). This results in arbitrary UIDs on OCP not being able to write there.
This could be solved at container image build-time for APISIX images by following "Support arbitrary user ids" from OpenShift docs.
This can be PoC'd by creating a dependant image, which applies the recommended chgrp & chmod commands.
Description
On OpenShift, it shouldn't be necessary for the user to add 'anyuid' permissions to SA that will be running APISIX.
The issues that are currently solved by using
anyuid(#10480, #11425) are most likely due to/usr/local/apisixbeing owned byapisix:apisix(uid 636). This results in arbitrary UIDs on OCP not being able to write there.This could be solved at container image build-time for APISIX images by following "Support arbitrary user ids" from OpenShift docs.
This can be PoC'd by creating a dependant image, which applies the recommended chgrp & chmod commands.