Skip to content

Fixup Building with Rootless Podman - #311

Open
thebeanogamer wants to merge 2 commits into
kubernetes-client:masterfrom
thebeanogamer:master
Open

thebeanogamer wants to merge 2 commits into
kubernetes-client:masterfrom
thebeanogamer:master

Conversation

@thebeanogamer

Copy link
Copy Markdown

Some fixes I had to manually apply when trying to run the Java builder with rootless Podman.

  • Fix container filesystem permissions for rootless podman
  • Fully qualify base image path

Copilot AI balanced review requested due to automatic review settings October 6, 2026 14:22
@kubernetes-prow

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: thebeanogamer
Once this PR has been reviewed and has the lgtm label, please assign brendandburns for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Oct 6, 2026
@kubernetes-prow

Copy link
Copy Markdown

Welcome @thebeanogamer!

It looks like this is your first PR to kubernetes-client/gen 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes-client/gen has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

@kubernetes-prow kubernetes-prow Bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Oct 6, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The unconditional Podman-only --userns=keep-id option breaks client generation with Docker.

Review effort: Balanced
Findings: 1 High severity

Open (1)
What changed in this PR

Improves rootless Podman compatibility for the shared OpenAPI client generator, motivated by Java client builds.

Changes:

  • Fully qualifies the Maven base image.
  • Adds user-namespace mapping and explicit UID:GID settings.
File Description
openapi/​openapi-generator/​Dockerfile Uses the fully qualified Docker Hub image name.
openapi/​openapi-generator/​client-generator.sh Adjusts container user mapping for rootless Podman.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

echo "--- Running generator inside container..."
docker run --rm --security-opt="label=disable" -u $(id -u) \
docker run --rm --security-opt="label=disable" \
--userns=keep-id -u "$(id -u):$(id -g)" \
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants