Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DWOC config.workspace.containerSecurityContext not being applied to containers added via routingClass #1359

Closed
dkwon17 opened this issue Dec 19, 2024 · 1 comment
Milestone

Comments

@dkwon17
Copy link
Collaborator

dkwon17 commented Dec 19, 2024

Description

When the DWOC defines a containerSecurityContext:

    containerSecurityContext:
      allowPrivilegeEscalation: true
      capabilities:
        add:
          - SETGID
          - SETUID

the containerSecurityContext is not applied to the workspace containers that are added via routing class.

This behaviour is most easily reproduced with Eclipse Che (which uses the che routing class), see eclipse-che/che#22747.

In the case of Eclipse Che, the workspace container that does not have the containerSecurityContext set, is the che-gateway conatiner.

Expected behavior

The containerSecurityContext should be applied to all workspace containers

Additional context

@dkwon17
Copy link
Collaborator Author

dkwon17 commented Dec 19, 2024

Fixed by #1358

@dkwon17 dkwon17 closed this as completed Dec 19, 2024
@dkwon17 dkwon17 modified the milestones: v.0.32.0, v.0.32.x, v0.32.x Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant