Uploaded image for project: 'Docs for Red Hat Developers'
  1. Docs for Red Hat Developers
  2. RHDEVDOCS-6461

Enable "securityContext" to be set by end user in Openshift-Pipelines

XMLWordPrintable

    • Pipelines Sprint Pioneers 28
    • 5
    • Hide
      * Users can now define their own securityContext under the EventListener YAML.
      ex:
      ```
      spec:
        serviceAccountName: tekton-triggers-example-sa
        resources:
          kubernetesResource:
            spec:
              template:
                spec:
                  securityContext:
                    runAsNonRoot: true
                  containers:
                    - resources:
                        requests:
                          memory: "64Mi"
                          cpu: "250m"
                        limits:
                          memory: "128Mi"
                          cpu: "500m"
                      securityContext:
                        readOnlyRootFilesystem: true
      ```
      * When el-security-context is true
          - If the user sets a custom securityContext, it is give priority and used same.
          - If not, a default securityContext is applied.
      Show
      * Users can now define their own securityContext under the EventListener YAML. ex: ``` spec:   serviceAccountName: tekton-triggers-example-sa   resources:     kubernetesResource:       spec:         template:           spec:             securityContext:               runAsNonRoot: true             containers:               - resources:                   requests:                     memory: "64Mi"                     cpu: "250m"                   limits:                     memory: "128Mi"                     cpu: "500m"                 securityContext:                   readOnlyRootFilesystem: true ``` * When el-security-context is true     - If the user sets a custom securityContext, it is give priority and used same.     - If not, a default securityContext is applied.

              rhn-support-ochromy Ondrej Chromy
              mramendi Mikhail Ramendik
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: