Skip to content

fix(images): remove image-specific owner and mode set for gateway binary#1371

Merged
TaylorMutch merged 1 commit into
NVIDIA:mainfrom
sjenning:fix/certgen-security-context
May 13, 2026
Merged

fix(images): remove image-specific owner and mode set for gateway binary#1371
TaylorMutch merged 1 commit into
NVIDIA:mainfrom
sjenning:fix/certgen-security-context

Conversation

@sjenning
Copy link
Copy Markdown
Contributor

@sjenning sjenning commented May 13, 2026

Summary

Remove the --chown=nvs:nvs --chmod=0550 flags from the gateway Dockerfile COPY instruction.

If the user overrides the user ID in the helm values or the UID can't be controlled, as is the case with OpenShift, this will break. This preserves the original 0755 mode and, since it is world executable, there is no need to chown.

Changes

  • Removed --chown=nvs:nvs --chmod=0550 from the gateway binary COPY instruction in deploy/docker/Dockerfile.gateway
  • Removed the associated explanatory comment block

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented May 13, 2026

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@TaylorMutch TaylorMutch added the test:e2e Requires end-to-end coverage label May 13, 2026
@github-actions
Copy link
Copy Markdown

Label test:e2e applied, but pull-request/1371 is at {"messa while the PR head is 640a345. A maintainer needs to comment /ok to test 640a3451b334ec591a75eebd41665de37f6b7227 to refresh the mirror. Once the mirror catches up, re-run Branch E2E Checks from the Actions tab.

@TaylorMutch
Copy link
Copy Markdown
Collaborator

/ok to test 640a345

@TaylorMutch TaylorMutch merged commit 0c8c723 into NVIDIA:main May 13, 2026
40 of 42 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants