Fix security context for PSS restricted policy being overridden when runAsUser specified (#20)

ordovicia · web-flow · commit 5b24a65748c5 · 2023-08-09T14:27:33.000+09:00
diff --git a/webhooks/mutatepod_parts.go b/webhooks/mutatepod_parts.go
@@ -65,10 +65,9 @@ func gcloudSetupContainer(
 			},
 		},
 	}
+
 	if runAsUser != nil {
-		securityContext = &corev1.SecurityContext{
-			RunAsUser: runAsUser,
-		}
+		securityContext.RunAsUser = runAsUser
 	}
 
 	c := corev1.Container{

Original file line number	Diff line number	Diff line change
`@@ -65,10 +65,9 @@ func gcloudSetupContainer(`
`65`	`65`	`},`
`66`	`66`	`},`
`67`	`67`	`}`
	`68`	`+`
`68`	`69`	`if runAsUser != nil {`
`69`		`- securityContext = &corev1.SecurityContext{`
`70`		`- RunAsUser: runAsUser,`
`71`		`- }`
	`70`	`+ securityContext.RunAsUser = runAsUser`
`72`	`71`	`}`
`73`	`72`
`74`	`73`	`c := corev1.Container{`