Skip to content

Conversation

@MartinKirchner
Copy link

If helm chart was deployed to use a non privileged port Apache Answer wrote wrong port (always 80) into config file. Then the pod restarted which ended in a crash loop as non-root users may not open privileged ports.

Fixes #1438

…ided

If helm chart was deployed to use a non privileged port Apache Answer
wrote wrong port (always 80) into config file. Then the pod restarted
which ended in a crash loop as non-root users may not open privileged
ports.
@LinkinStars LinkinStars self-assigned this Dec 3, 2025
@LinkinStars LinkinStars self-requested a review December 3, 2025 02:46
@LinkinStars
Copy link
Member

LinkinStars commented Dec 3, 2025

Does this conflict with the previous one #1029? Can this issue be resolved using the SITE_ADDR SWAGGER_HOST SWAGGER_ADDRESS_PORT environment variable? Alternatively, wouldn't it be better to write this configuration to the file if SITE_ADDR is set during installation? For example

	siteAddr := os.Getenv("SITE_ADDR")
	if len(siteAddr) > 0 {
		c.Server.HTTP.Addr = siteAddr
	}

@MartinKirchner
Copy link
Author

Does this conflict with the previous one #1029? Can this issue be resolved using the SITE_ADDR SWAGGER_HOST SWAGGER_ADDRESS_PORT environment variable? Alternatively, wouldn't it be better to write this configuration to the file if SITE_ADDR is set during installation? For example

	siteAddr := os.Getenv("SITE_ADDR")
	if len(siteAddr) > 0 {
		c.Server.HTTP.Addr = siteAddr
	}

Well, it might be that this solves the issue. If so, it would be good the documentation would describe how Answer can be run in K8s without root privileges. Actually, it would be even better if the helm chart would provide good defaults.
At the moment the helm chart is only partly helpful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants