Skip to content

Remove the ownership workaround when Cilium fixes #149

Open

Description

@github-actions

https://github\.com/cilium/cilium/issues/40533\.

# TODO: Remove the ownership workaround when Cilium fixes
# https://github.com/cilium/cilium/issues/40533.

                  name: spire-data
                - mountPath: /tmp/spire-server/private
                  name: spire-server-socket
              # The chart's cilium-init bootstrap container reaches the SPIRE
              # admin socket through /proc/<pid>/root. Ptrace access requires
              # its UID/GID to match spire-server, so set the identity at pod
              # level; the chown init container overrides this back to root.
              # TODO: Remove the ownership workaround when Cilium fixes
              # https://github.com/cilium/cilium/issues/40533.
              podSecurityContext:
                runAsGroup: 1000
                runAsUser: 1000
              securityContext:
                runAsGroup: 1000
                runAsUser: 1000

Activity

  1. moved this to 📥 Backlog in 🌊 Project Boardon Aug 25, 2026
  2. added theissue type on Aug 25, 2026
  3. devantler commented on Oct 24, 2026

    @devantler
    Contributor

    🤖 Generated by the Agentic Engineer (interactive Claude Code session)

    Upstream moved (checked 2026-10-24). cilium/cilium#40533 was closed as completed on 2026-07-13. The reference platform still carries the same SPIRE ownership workaround on main (k8s/bases/infrastructure/controllers/cilium/helm-release.yaml), and this template follows the platform. Next step: confirm which Cilium release ships the fix and whether 1.20.2 (the template's pin) includes it, remove the workaround on the platform first with a cluster check that SPIRE starts, then port the removal here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Fields

Priority

None yet

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions