concourse: Privileged workloads getting access denied
Summary
After upgrade to concourse v7.5.0, we are running into an issue for some of the workloads that run on privileged containers. The same tasks and image used to work in previous versions of concourse. We are seeing failure for mysql and postgres job. The following reproduction is only for postgres.
Steps to reproduce
The following gist will have a sample task and an application that tries to ping the database after starting up:
https://gist.github.com/aminjam/3a4b227b86f6c67c6c91d5bfa2783a1f
Expected results
We should be able to ping the database
Actual results
could not open file "base/16384/PG_VERSION": Permission denied (SQLSTATE 42501)
Triaging info
- Concourse version: 7.5.0
- Browser (if applicable): N/A
- Did this used to work? Yes
About this issue
- Original URL
- State: closed
- Created 3 years ago
- Comments: 17 (12 by maintainers)
Confirmed the issue started from concourse 7.4 with
guardianruntime.