feat: configure securityContext for che-gateway container (#1358)

Signed-off-by: Anatolii Bazko <[email protected]>
devfile · Dec 18, 2024 · 0db6aba · 0db6aba
1 parent c47e453
commit 0db6aba
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/pkg/provision/workspace/routing.go b/pkg/provision/workspace/routing.go
@@ -56,6 +56,19 @@ func SyncRoutingToCluster(
 		return nil, nil, statusMsg, &dwerrors.RetryError{Message: statusMsg, RequeueAfter: 5 * time.Second}
 	}
 
+	// Configure securityContext for pod additions, for example che-gateway container
+	// https://github.com/eclipse-che/che/issues/22747
+	if clusterRouting.Status.PodAdditions != nil &&
+		workspace.Config.Workspace != nil &&
+		workspace.Config.Workspace.ContainerSecurityContext != nil {
+
+		for i, container := range clusterRouting.Status.PodAdditions.Containers {
+			if container.SecurityContext == nil {
+				clusterRouting.Status.PodAdditions.Containers[i].SecurityContext = workspace.Config.Workspace.ContainerSecurityContext
+			}
+		}
+	}
+
 	return clusterRouting.Status.PodAdditions, clusterRouting.Status.ExposedEndpoints, statusMsg, nil
 }