Re: [Discuss] Make docker image default group rootless

2023-08-29 Thread Michael Marshall
> Do we need `Support Arbitrary User IDs` in pulsar docker image to allow > root group r/w `/pulsar` ? The list of directories that the pulsar process needs to write to is listed here [0]. In order for the image to work on OpenShift out of the box, we need to follow the referenced documentation.

Re: [Discuss] Make docker image default group rootless

2023-08-29 Thread asn
Hi Michael, Do we need `Support Arbitrary User IDs` in pulsar docker image to allow root group r/w `/pulsar` ? It seems that some other opensource projects use specific uid and gid, e.g. https://github.com/docker-library/mysql/blob/master/8.0/Dockerfile.debian#L84 https://github.com/docker-libra

[DISCUSS] Cherry-pick #18518 into branch-2.10 and branch-2.11

2023-08-29 Thread Yubiao Feng
Hi all ### Background The PR https://github.com/apache/pulsar/pull/18518 added to MetadataStore the support for using the sync() API and added refreshAndGetAsync() to MetadataCache. The PR https://github.com/apache/pulsar/pull/21063 fixed a bug that Broker will create both non-partitioned topic a

Re: [VOTE] Pulsar Client Python Release 3.3.0 Candidate 1

2023-08-29 Thread Baodi Shi
Close this vote with 3(binding) - Matteo - Yunze - PengHui Thanks, Baodi Shi On Aug 29, 2023 at 01:50:25, Matteo Merli wrote: > +1 binding > > - Checked signatures > - Checked macos and linux wheel files. > > > -- > Matteo Merli > > > > On Sun, Aug 27, 2023 at 6:13 PM PengHui Li

Re: [Discuss] Make docker image default group rootless

2023-08-29 Thread Michael Marshall
Hi yaasln, What are the security concerns related to the user being a member of the root group? I used the root group when making the docker image run as a non root user because that follows the OpenShift guidelines [0]. Thanks, Michael [0] https://docs.openshift.com/container-platform/3.11/cre

Re: [DISCUSS] PIP-297: Support raising exceptions using Function & Connector context

2023-08-29 Thread Zike Yang
Hi, Enrico Thanks for your review. I have replied under the PR. BR, Zike Yang On Mon, Aug 28, 2023 at 6:39 PM Enrico Olivelli wrote: > > Zike, > > Il giorno lun 28 ago 2023 alle ore 11:53 Zike Yang ha > scritto: > > > > Hi, all > > > > I opened a new PIP: https://github.com/apache/pulsar/pull

[Discuss] Make docker image default group rootless

2023-08-29 Thread asn
Hi dev, Currently, pulsar image uses root group default. To make the image more safe, we can add a group `pulsar`, and then add the default user `pulsar` into this group. The change is located at https://github.com/apache/pulsar/pull/21084 Thanks! yaalsn