steps

Documentation

Index

• Constants
• func UpdateSecurityContext(taskSpec *pipelineapi.TaskSpec, taskRunAnnotations map[string]string, ...)

Constants

const (
	// AnnotationSecurityContextGroup is an annotation set on the TaskRun and used in a downward volume to project a dynamic group file into a container
	AnnotationSecurityContextGroup = buildapi.BuildRunDomain + "/security-context-group"

	// AnnotationSecurityContextPasswd is an annotation set on the TaskRun and used in a downward volume to project a dynamic passwd file into a container
	AnnotationSecurityContextPasswd = buildapi.BuildRunDomain + "/security-context-passwd"

	// VolumeNameSecurityContext is used as a volume name for a downward volume to project a dynamic passwd file into a container
	VolumeNameSecurityContext = "shp-security-context"
)

Functions

func UpdateSecurityContext

func UpdateSecurityContext(taskSpec *pipelineapi.TaskSpec, taskRunAnnotations map[string]string, buildStrategySteps []buildapi.Step, buildStrategySecurityContext *buildapi.BuildStrategySecurityContext)

UpdateSecurityContext updates the security context of a step based on the build strategy steps. If all build strategy steps run as the same user and group, then the step is configured to also run as this user and group. This ensures that the supporting steps run as the same user as the build strategy and file permissions created by source steps match the user that runs the build strategy steps.