You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Remove the ownership workaround when Cilium fixes #149
name: spire-data
- mountPath: /tmp/spire-server/privatename: spire-server-socket# The chart's cilium-init bootstrap container reaches the SPIRE# admin socket through /proc/<pid>/root. Ptrace access requires# its UID/GID to match spire-server, so set the identity at pod# level; the chown init container overrides this back to root.# TODO: Remove the ownership workaround when Cilium fixes# https://github.com/cilium/cilium/issues/40533.podSecurityContext:
runAsGroup: 1000runAsUser: 1000securityContext:
runAsGroup: 1000runAsUser: 1000
🤖 Generated by the Agentic Engineer (interactive Claude Code session)
Upstream moved (checked 2026-10-24).cilium/cilium#40533 was closed as completed on 2026-07-13. The reference platform still carries the same SPIRE ownership workaround on main (k8s/bases/infrastructure/controllers/cilium/helm-release.yaml), and this template follows the platform. Next step: confirm which Cilium release ships the fix and whether 1.20.2 (the template's pin) includes it, remove the workaround on the platform first with a cluster check that SPIRE starts, then port the removal here.
Activity
devantler commentedon Oct 24, 2026
Upstream moved (checked 2026-10-24). cilium/cilium#40533 was closed as completed on 2026-07-13. The reference platform still carries the same SPIRE ownership workaround on
main(k8s/bases/infrastructure/controllers/cilium/helm-release.yaml), and this template follows the platform. Next step: confirm which Cilium release ships the fix and whether 1.20.2 (the template's pin) includes it, remove the workaround on the platform first with a cluster check that SPIRE starts, then port the removal here.