Best way to set env variable for both default and root user in kubernetes

user_4659530 0
Viewed 25

I want to set some proxy (http, https etc) config on my k8s container. That k8s container will run some user scripts, it may also run some sudo commands in that script.

What is the best way to pass this proxy config in my k8s container.

One approach I was trying was passing the proxy config as env variable to the container in my deployment manifest file.

Drawback: It will set only for default user and not root user. sudo commands will fail. User/container start script will need to set proxy config in the container for root user.

Any other alternative or clean way of passing env variable to all users in the container?

Another approach I am using now is env_keep and adding proxy config env variable list in env_keep and when command is executed with sudo in pod, it will take env variable of default user that I set using deployment manifest.

Is there any other alternatives ?

kubernetes proxy linux
1 Answers

Best practice is to run the Init container as Root.

And further, once you startup script is done with work you can run your container as the Non-root user.

Init container : https://kubernetes.io/docs/concepts/workloads/pods/init-containers/

Update:

You can also use the sudo -E

-E, --preserve-env
             Indicates to the security policy that the user wishes to preserve their
             existing environment variables.  The security policy may return an error
             if the user does not have permission to preserve the environment.
user_55258240
Related