Skip to content

pod: Support runAsUser: 0 #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jlebon merged 1 commit into from
Sep 13, 2019
Merged

pod: Support runAsUser: 0 #3

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions vars/coreos.groovy
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,17 +1,22 @@
// Run the passed body in a pod respecting some parameters.
// Available parameters:
// image: string
// privileged: bool
// kvm: bool
// runAsUser: int
// privileged: bool (deprecated, equivalent to `runAsUser: 0`)
def pod(params, body) {
def podJSON = libraryResource 'com/github/coreos/pod.json'
def podObj = readJSON text: podJSON
podObj['spec']['containers'][1]['image'] = params['image']

if (params['privileged']) {
// Backwards compat, see https://github.com/projectatomic/rpm-ostree/pull/1899/commits/9c1709c363e94760f0e9461719b92a7a4aca6c63#r323256575
params['runAsUser'] = 0
}
if (params['runAsUser']) {
// XXX: tmp hack to get anyuid SCC; need to ask to get jenkins SA added
podObj['spec']['serviceAccountName'] = "papr"
podObj['spec']['containers'][1]['securityContext'] = [runAsUser: 0]
podObj['spec']['containers'][1]['securityContext'] = [runAsUser: params['runAsUser']]
}

if (params['kvm']) {
Expand Down