Trying to setup prefect orion agent on a local kubernetes cl

Question

Trying to setup prefect orion agent on a local kubernetes cluster but get the following error in the pod Error container has runAsNonRoot and image will run as root What does this mean exactly and how to fix it

xyzz · Answer

figured it out thanks to the helm chart securityContext needs to be explicitly set but is missing from the spec generated by the CLI

xyzz · Answer

is the helm chart to be preferred over the CLI for spec generation

xyzz · Answer

if so is this documented anywhere

Christopher Boyd · Answer

Can you share the error and chart you are using This is the first time I ve seen this reported and we have a large number of users who use these helm charts

Christopher Boyd · Answer

From what I can see this should be set in the chart ``` podSecurityContext set agent pod s security context runAsUser runAsUser 1001 set agent pod s security context runAsNonRoot runAsNonRoot true set agent pod s security context fsGroup fsGroup 1001```

Christopher Boyd · Answer

Do you ahve any specific restrictions or security settings on your cluster itself

xyzz · Answer

the problem was that I didn t use the helm chart but the spec generated by the cli

xyzz · Answer

maybe generating the spec using the cli should be marked as deprecated

xyzz · Answer

using the helm chart worked