This is in my deployment YAML file:
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 10001What changes do I have to make to install python:
kubectl exec -it carts-66bc68f95f-8wjgx -c carts -n sock-shop -- sh
/usr/src/app $ apk add python
ERROR: Unable to lock database: Permission denied
ERROR: Failed to open apk database: Permission denied
/usr/src/app $ echo hello > sample.txt
sh: can't create sample.txt: Read-only file system
/usr/src/app $
You basically can't from the Kubernetes shell. This works as designed for security reasons.
If you are running Docker a way to bypass this is to login/SSH to the machine where this Pod is running. (You might not be able to SSH to the node depending what security controls your organization has in place)
Find the container in question:
$ docker ps -a | grep carts-66bc68f95f-8wjgxThen exec to the container as root:
$ docker exec -it --user=root <container-name> bash
# apk add pythonHaving said that, I recommend that you start from a container image that already has Python installed.