You've already forked sap-jenkins-library
mirror of
https://github.com/SAP/jenkins-library.git
synced 2025-09-16 09:26:22 +02:00
fix: privileged
This commit is contained in:
@@ -344,7 +344,7 @@ func buildahExecuteMetadata() config.StepData {
|
|||||||
},
|
},
|
||||||
},
|
},
|
||||||
Containers: []config.Container{
|
Containers: []config.Container{
|
||||||
{Name: "buildah", Image: "quay.io/buildah/stable:latest", EnvVars: []config.EnvVar{{Name: "BUILDAH_ISOLATION", Value: "chroot"}, {Name: "STORAGE_DRIVER", Value: "vfs"}, {Name: "STORAGE_OPTS", Value: ""}}},
|
{Name: "buildah", Image: "quay.io/buildah/stable:latest"},
|
||||||
},
|
},
|
||||||
Outputs: config.StepOutputs{
|
Outputs: config.StepOutputs{
|
||||||
Resources: []config.StepResources{
|
Resources: []config.StepResources{
|
||||||
|
@@ -114,16 +114,5 @@ spec:
|
|||||||
- name: buildah
|
- name: buildah
|
||||||
image: quay.io/buildah/stable:latest
|
image: quay.io/buildah/stable:latest
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsUser: 0
|
privileged: true
|
||||||
privileged: false
|
runAsUser: 1000
|
||||||
capabilities:
|
|
||||||
add:
|
|
||||||
- SETUID
|
|
||||||
- SETGID
|
|
||||||
env:
|
|
||||||
- name: BUILDAH_ISOLATION
|
|
||||||
value: "chroot"
|
|
||||||
- name: STORAGE_DRIVER
|
|
||||||
value: "vfs"
|
|
||||||
- name: STORAGE_OPTS
|
|
||||||
value: ""
|
|
||||||
|
Reference in New Issue
Block a user