Repository navigation

Add OpenShift compatibility: rootless, arbitrary-UID support - #432

Open

jfstenuit wants to merge 20 commits into

MISP:masterfrom

jfstenuit:openshift-ready

Open

Add OpenShift compatibility: rootless, arbitrary-UID support#432
jfstenuit wants to merge 20 commits into
MISP:masterfrom
jfstenuit:openshift-ready

Commits on Nov 4, 2026
- feat: run misp-core/misp-modules/misp-guard rootless with arbitrary-UID support for OpenShift
  jfstenuit
  committed
  295836f
- Fix remaining usage of static UID
  jfstenuit
  committed
  43d88c2
- Better approach at adressing the UUID issue in PHP-FPM
  jfstenuit
  committed
  1da9977
- Various fixes :
  jfstenuit
  committed
  65cb026
- Fixed overlapping ENV values in helm chart
  jfstenuit
  committed
  0802da4
- Fix one remaining "RunAsUser"
  jfstenuit
  committed
  df18732
- Generalization / fixes in values.yaml
  jfstenuit
  committed
  a123a82
- Fix deployment to use MySQL and Redis passwords from environment rather than from secret store
  jfstenuit
  committed
  75afd97
- Fix OpenShift upgrade strategy to avoid deadlocks.
  jfstenuit
  committed
  dcb504c
- cake Admin runUpdates refused to run because invalid UID (none in passwd file, as expected) - now runs via libnsswrapper to ensure the name 'www-data' is mapped to the OpenShift random UID
  jfstenuit
  committed
  32be753
- nginx: add NGINX_TRUST_PROXY_TLS to skip cert/BASE_URL consistency check
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  8bdf151
- kubernetes entrypoint: make the supervisor conf mv idempotent
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  8c67ef9
- configure_misp: bound the cacert.pem curl and fall back on failure
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  cb7129c
- php-fpm: keep the OS environment for request workers (clear_env=no)
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  1c25003
- configure_misp: make MISP.osuser overridable via MISP_OSUSER env var
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  10bf81f
- core: drop duplicate workflow module ID shipped in v2.5.47
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  7c23f25
- compose: automate bind-mount ownership via a misp-core-init service
  
  Jean-Francois Stenuit
  authored and
  jfstenuit
  committed
  885a414
- ci: add OpenShift compatibility workflow
  jfstenuit
  committed
  3c7d6d4
- core: fix init.sh entrypoint permission and cacert.pem runtime refresh
  jfstenuit
  committed
  0862a26
Commits on Nov 5, 2026
- helm-chart: fix PVC portability and nginx-sidecar wiring found via a real k3s deploy
  jfstenuit
  committed
  cdb24b1

Commits

Commits on Nov 4, 2026

Commits on Nov 5, 2026