pod.Spec.SecurityContext.RunAsNonRoot should be nil if --as-root sp…

…ecifiled
openshift · Oct 6, 2021 · 49e93d1 · 49e93d1
1 parent a50423c
commit 49e93d1
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pkg/cli/debug/debug.go b/pkg/cli/debug/debug.go
@@ -799,6 +799,13 @@ func (o *DebugOptions) transformPodForDebug(annotations map[string]string) (*cor
 		container.SecurityContext.RunAsNonRoot = nil
 	}
 
+	// if DebugOptions set container.SecurityContext.RunAsNonRoot to nil,
+	// pod.Spec.SecurityContext.runAsNonRoot should be nil also.
+	if container.SecurityContext.RunAsNonRoot == nil &&
+		pod.Spec.SecurityContext != nil {
+		pod.Spec.SecurityContext.RunAsNonRoot = nil
+	}
+
 	switch {
 	case o.OneContainer:
 		pod.Spec.InitContainers = nil