mirror of
https://github.com/woodpecker-ci/woodpecker.git
synced 2024-10-23 02:23:53 +00:00
always define fsGroup
This commit is contained in:
parent
59ded1a8e7
commit
ea366e9e89
1 changed files with 5 additions and 5 deletions
|
@ -412,15 +412,15 @@ func podSecurityContext(sc *SecurityContext, secCtxConf SecurityContextConfig, s
|
||||||
nonRoot = sc.RunAsNonRoot
|
nonRoot = sc.RunAsNonRoot
|
||||||
}
|
}
|
||||||
|
|
||||||
// if unset, set fsGroup to 1000 by default to support non-root images
|
|
||||||
if sc.FSGroup == nil {
|
|
||||||
fsGroup = newInt64(defaultFSGroup)
|
|
||||||
}
|
|
||||||
|
|
||||||
seccomp = seccompProfile(sc.SeccompProfile)
|
seccomp = seccompProfile(sc.SeccompProfile)
|
||||||
apparmor = apparmorProfile(sc.ApparmorProfile)
|
apparmor = apparmorProfile(sc.ApparmorProfile)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// if unset, set fsGroup to 1000 by default to support non-root images
|
||||||
|
if sc.FSGroup == nil {
|
||||||
|
fsGroup = newInt64(defaultFSGroup)
|
||||||
|
}
|
||||||
|
|
||||||
if nonRoot == nil && user == nil && group == nil && fsGroup == nil && seccomp == nil {
|
if nonRoot == nil && user == nil && group == nil && fsGroup == nil && seccomp == nil {
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue