Make PR experiment containers privileged too. (#706)

Verified that this enables gdb/ptrace inside the container.
google · Nov 8, 2024 · 1525441 · 1525441
1 parent 5be0cad
commit 1525441
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/ci/k8s/pr-exp.yaml b/ci/k8s/pr-exp.yaml
@@ -32,6 +32,8 @@ spec:
         # For benchmark sets that need more disk, increase the results volume
         # size too.
         command: ["/bin/bash", "report/docker_run.sh", "${GKE_EXP_BENCHMARK}", "${GKE_EXP_NAME}", "${GKE_EXP_FUZZING_TIMEOUT}", "ofg-pr", "${GKE_EXP_LLM}", "${GKE_EXP_DELAY}", "${GKE_EXP_LOCAL_INTROSPECTOR}", "${GKE_EXP_NUM_SAMPLES}", "${GKE_EXP_LLM_FIX_LIMIT}", "${GKE_EXP_VARY_TEMPERATURE}", "${GKE_EXP_AGENT}"]
+        securityContext:
+          privileged: true
         resources:
           requests:
             cpu: ${GKE_EXP_REQ_CPU}