Skip to content

DWOC config.workspace.containerSecurityContext not being applied to containers added via routingClass #1359

@dkwon17

Description

@dkwon17

Description

When the DWOC defines a containerSecurityContext:

    containerSecurityContext:
      allowPrivilegeEscalation: true
      capabilities:
        add:
          - SETGID
          - SETUID

the containerSecurityContext is not applied to the workspace containers that are added via routing class.

This behaviour is most easily reproduced with Eclipse Che (which uses the che routing class), see eclipse-che/che#22747.

In the case of Eclipse Che, the workspace container that does not have the containerSecurityContext set, is the che-gateway conatiner.

Expected behavior

The containerSecurityContext should be applied to all workspace containers

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions