seg_yinzy
/
che-operator
mirror of https://github.com/eclipse-che/che-operator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Set SCC allowPrivilegeEscalation to true when container build enabled (#1596) 

* Set SCC allowPrivilegeEscalation to true when container build enabled

Running Podman inside a container in OpenShift requires the pod to have
allowPrivilegeEscalation: true in its security context.

* Fix tests

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
pull/1600/head
Angel Misevski 2023-01-11 10:39:23 -05:00 committed by GitHub
parent 6110221447
commit 3d07ff759a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/common/constants/constants.go
View File

@ -154,6 +154,6 @@ var (
"SETUID",
},
},
AllowPrivilegeEscalation: pointer.BoolPtr(false),
AllowPrivilegeEscalation: pointer.BoolPtr(true),
}
)

4
pkg/deploy/dev-workspace-config/dev_workspace_config_test.go
View File

@ -383,7 +383,7 @@ func TestReconcileDevWorkspaceConfigPerUserStorage(t *testing.T) {
"SETUID",
},
},
AllowPrivilegeEscalation: pointer.BoolPtr(false),
AllowPrivilegeEscalation: pointer.BoolPtr(true),
},
},
},
@ -434,7 +434,7 @@ func TestReconcileDevWorkspaceConfigPerUserStorage(t *testing.T) {
"SETUID",
},
},
AllowPrivilegeEscalation: pointer.BoolPtr(false),
AllowPrivilegeEscalation: pointer.BoolPtr(true),
},
},
},