diff --git a/docs/config/nginx-IP-header.yaml b/docs/config/nginx-IP-header.yaml index 8054e15d12..c5f1269352 100644 --- a/docs/config/nginx-IP-header.yaml +++ b/docs/config/nginx-IP-header.yaml @@ -30,6 +30,8 @@ spec: - name: nginx-configs subPath: headers.conf mountPath: /etc/nginx/conf.d/headers.conf + securityContext: + runAsUser: 0 volumes: - name: nginx-configs configMap: diff --git a/docs/howto_load_balancer.md b/docs/howto_load_balancer.md index d668745e43..d1438e8e49 100644 --- a/docs/howto_load_balancer.md +++ b/docs/howto_load_balancer.md @@ -18,7 +18,9 @@ oc get pods -A Log into the virtual machine and run the following commands to create the `MetalLB` namespace and deployment. ``` -oc apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.4/config/manifests/metallb-native.yaml +oc apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.7/config/manifests/metallb-native.yaml +oc adm policy add-scc-to-user privileged -z controller -n metallb-system +oc adm policy add-scc-to-user privileged -z speaker -n metallb-system ``` Verify that the `MetalLB` pods are up and running in the `metallb-system` namespace. @@ -46,11 +48,12 @@ EOF ``` ## Install User Workload -Log into the virtual machine and create the namespace to be used for deploying the test application. +Log into the virtual machine and create the namespace to be used for deploying the test application. Be aware that this test application will run as root user, which is not a security best practice. ```bash NAMESPACE=nginx-lb-test oc create ns $NAMESPACE +oc adm policy add-scc-to-user privileged -z default -n $NAMESPACE ``` Run the following command to deploy **3 replicas** of a test `nginx` application in the specified namespace.