Description
When the DWOC defines a containerSecurityContext:
containerSecurityContext:
allowPrivilegeEscalation: true
capabilities:
add:
- SETGID
- SETUID
the containerSecurityContext is not applied to the workspace containers that are added via routing class.
This behaviour is most easily reproduced with Eclipse Che (which uses the che routing class), see eclipse-che/che#22747.
In the case of Eclipse Che, the workspace container that does not have the containerSecurityContext set, is the che-gateway conatiner.
Expected behavior
The containerSecurityContext should be applied to all workspace containers
Additional context