Update CatalogSource Pod security context #2782
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
openshift-ci
bot
added
the
approved
perdasilva
force-pushed
the
catsrc_security
branch
4 times, most recently
from
37cb6be to
d666c11
Compare
perdasilva
force-pushed
the
catsrc_security
branch
from
d666c11 to
9ced412
Compare
openshift-ci
bot
removed
the
approved
openshift-ci
bot
added
the
approved
perdasilva
force-pushed
the
catsrc_security
branch
from
b9ff32c to
b826247
Compare
|
/hold waiting on discussion about approach |
openshift-ci
bot
added
the
do-not-merge/hold
perdasilva
force-pushed
the
catsrc_security
branch
15 times, most recently
from
65d8caf to
6ae0109
Compare
perdasilva
force-pushed
the
catsrc_security
branch
6 times, most recently
from
92b55f2 to
a480d8b
Compare
perdasilva
commented
Jun 2, 2022
|
/hold cancel |
openshift-ci
bot
removed
the
do-not-merge/hold
perdasilva
force-pushed
the
catsrc_security
branch
4 times, most recently
from
7e1e2f1 to
1d99623
Compare
11 tasks
perdasilva
force-pushed
the
catsrc_security
branch
from
1d99623 to
c10972f
Compare
Signed-off-by: perdasilva <[email protected]>
Signed-off-by: perdasilva <[email protected]>
Signed-off-by: perdasilva <[email protected]>
perdasilva
force-pushed
the
catsrc_security
branch
from
c10972f to
a32dbcb
Compare
exdx
approved these changes
Jun 9, 2022
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: exdx, perdasilva The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
perdasilva
added a commit
to perdasilva/operator-lifecycle-manager
that referenced
this pull request
Jun 23, 2022
perdasilva
added a commit
to perdasilva/operator-lifecycle-manager
that referenced
this pull request
Jun 23, 2022
…#2782)" This reverts commit 99b51e7. Signed-off-by: perdasilva <[email protected]>
perdasilva
added a commit
that referenced
this pull request
Jun 23, 2022
* Revert "Unpack job security updates (#2805)" This reverts commit e568cde. Signed-off-by: perdasilva <[email protected]> * Revert "Update unpack job pod security (#2793)" This reverts commit eedad28. Signed-off-by: perdasilva <[email protected]> * Revert "Update CatalogSource Pod security context (#2782)" This reverts commit 99b51e7. Signed-off-by: perdasilva <[email protected]>
perdasilva
added a commit
to perdasilva/operator-lifecycle-manager
that referenced
this pull request
Jul 4, 2022
* Update ci artifact collection Signed-off-by: perdasilva <[email protected]> * Update e2e test images to use FBC Signed-off-by: perdasilva <[email protected]> * Update CatalogSource Pod security context Signed-off-by: perdasilva <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Signed-off-by: perdasilva [email protected]
Description of the change:
Updates the security context stanzas for the backing CatalogSource pod and container to be more explicit and limited
This PR also includes:
scripts/build_test_images.shto build and publish all e2e test catalogsgetanddescribecalls to operate against all resources in the namespaceMotivation for the change:
https://bugzilla.redhat.com/show_bug.cgi?id=2088541
Reviewer Checklist
/doc[FLAKE]are truly flaky[FLAKE]tag are no longer flaky