talexander/personal_tekton_catalog
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Put a regular user step first.

Browse Source
This commit is contained in:
Tom Alexander 2025-02-23 13:18:10 -05:00
parent 23916baa61
commit caf789e7af
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
task/buildkit-rootless-daemonless/0.1/buildkit-rootless-daemonless.yaml
View File

@ -69,6 +69,17 @@ spec:
- name: metadata-out - name: metadata-out
emptyDir: {} emptyDir: {}
steps: steps:
- name: run-as-user
image: $(params.BUILDER_IMAGE)
workingDir: "$(workspaces.source.path)"
script: |
#!/usr/bin/env sh
set -euo pipefail
echo "yo"
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
- name: setup-cache-ownership - name: setup-cache-ownership
image: $(params.BUILDER_IMAGE) image: $(params.BUILDER_IMAGE)
workingDir: "$(workspaces.source.path)" workingDir: "$(workspaces.source.path)"