Skip to content

Conversation

@Alokzh
Copy link

@Alokzh Alokzh commented Jul 5, 2025

Description

This PR fixes missing resource specifications and overly permissive security contexts in OpenVPN gateway containers within slice gateway pod specifications.

Fixes: #363 , #364 , #365 , #366

Changes Made:

  • Added resource limits and requests for OpenVPN server (256Mi memory, 200m CPU)
  • Added resource limits and requests for OpenVPN client (128Mi memory, 100m CPU)
  • Updated SecurityContext for both containers to use minimum required permissions

How Has This Been Tested?

Tested with KubeSlice minimal-demo setup. Verified that gateway pods now have proper resource specs and security improvements without breaking functionality.

Checklist:

  • The title of the PR states what changed and the related issues number (used for the release note).
  • Does this PR requires documentation updates?
  • I've updated documentation as required by this PR.
  • I have ran go fmt
  • I have updated the helm chart as required by this PR.
  • I have performed a self-review of my own code.
  • I have commented my code, particularly in hard-to-understand areas.
  • I have tested it for all user roles.
  • I have added all the required unit test cases.
  • I have verified the E2E test cases with new code changes.
  • I have added all the required E2E test cases.

Does this PR introduce a breaking change?


…curity

Signed-off-by: Alokzh <zhalok24@gmail.com>
@pnavali
Copy link
Contributor

pnavali commented Jul 9, 2025

@gourishkb - please review the PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update worker slice gateway pod spec with openvpn client container SecurityContext

3 participants