Skip to content

Kubernetes executor container security context

Craig Squire requested to merge Ticketmaster/gitlab-runner:container-security-context into main

What does this MR do?

Adds the ability to set a security context for individual containers in the build pod.

Why was this MR needed?

When required to run all containers/pods as non-root users, the build, service and helper containers will not always work as the same non-root user. We need a way to set these security contexts individually.

Are there points in the code the reviewer needs to double check?

Does this MR meet the acceptance criteria?

  • Documentation created/updated
  • Added tests for this feature/bug
  • In case of conflicts with master - branch was rebased

What are the relevant issue numbers?

#4518 (closed)

Merge request reports