control-service: add security context to Data Job template

In order to run the data jobs as user 1000 and group 1000, we need to add the following properties to the template: * spec.jobTemplate.spec.template.spec.securityContext.fsGroup: 1000 * spec.jobTemplate.spec.template.spec.securityContext.runAsGroup: 1000 * spec.jobTemplate.spec.template.spec.securityContext.runAsUser: 1000 Testing done: unit and integration tests Signed-off-by: Miroslav Ivanov miroslavi@vmware.com
vmware · Feb 16, 2022 · 84e31cb · 84e31cb
1 parent 2fa77bf
commit 84e31cb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/...-service/projects/pipelines_control_service/src/test/resources/k8s-data-job-template.yaml b/...-service/projects/pipelines_control_service/src/test/resources/k8s-data-job-template.yaml
@@ -37,4 +37,8 @@ spec:
             image: busybox
             imagePullPolicy: IfNotPresent
           restartPolicy: OnFailure
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            fsGroup: 1000
       ttlSecondsAfterFinished: 600