Skip to content

Commit

Permalink
Add documentation on Kubernetes securityContext
Browse files Browse the repository at this point in the history
The new docs explain how to use the recently introduced kubernetes backend option to set the security context for pipeline steps.

See woodpecker-ci#2550
  • Loading branch information
dominic-p authored Nov 14, 2023
1 parent 342b258 commit f3eb3e9
Showing 1 changed file with 39 additions and 0 deletions.
39 changes: 39 additions & 0 deletions docs/docs/30-administration/22-backends/40-kubernetes.md
Original file line number Diff line number Diff line change
Expand Up @@ -153,6 +153,45 @@ steps:
[...]
```

### securityContext

Use the following configuration to set the `securityContext` for the pod/container running a given pipeline step:

```yaml
steps:
test:
image: alpine
commands:
- echo Hello world
backend_options:
kubernetes:
securityContext:
runAsUser: 999
runAsGroup: 999
privileged: true
[...]
```

Note that the `backend_options.kubernetes.securityContext` object allows you to set both pod and container level security context options in one object.
By default, the properties will be set at the pod level. Properties that are only supported on the container level will be set there instead. So, the
configuration shown above will result in something like the following pod spec:

```yaml
kind: Pod
spec:
securityContext:
runAsUser: 999
runAsGroup: 999
containers:
- name: wp-01hcd83q7be5ymh89k5accn3k6-0-step-0
image: alpine
securityContext:
privileged: true
[...]
```

See the [kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) for more information on using `securityContext`.

## Tips and tricks

### CRI-O
Expand Down

0 comments on commit f3eb3e9

Please sign in to comment.