Skip to content

Commit 3f7b54a

Browse files
authored
Make DefaultSecurityContext return a pointer to security context to align with corev1.SecurityContext (#693)
1 parent 9e02574 commit 3f7b54a

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

pkg/kube/container/container_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ func TestContainer(t *testing.T) {
2020
WithImage("image"),
2121
WithImagePullPolicy(corev1.PullAlways),
2222
WithPorts([]corev1.ContainerPort{{Name: "port-1", ContainerPort: int32(1000)}}),
23-
WithSecurityContext(corev1.SecurityContext{
23+
WithSecurityContext(&corev1.SecurityContext{
2424
RunAsGroup: int64Ref(100),
2525
RunAsNonRoot: boolRef(true),
2626
}),

pkg/kube/container/containers.go

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -178,17 +178,17 @@ func WithPorts(ports []corev1.ContainerPort) Modification {
178178
}
179179

180180
// WithSecurityContext sets teh container's SecurityContext
181-
func WithSecurityContext(context corev1.SecurityContext) Modification {
181+
func WithSecurityContext(context *corev1.SecurityContext) Modification {
182182
return func(container *corev1.Container) {
183-
container.SecurityContext = &context
183+
container.SecurityContext = context
184184
}
185185
}
186186

187187
// DefaultSecurityContext returns the default security context for containers.
188188
// It sets RunAsUser = 2000 and RunAsNonRoot = true
189-
func DefaultSecurityContext() corev1.SecurityContext {
189+
func DefaultSecurityContext() *corev1.SecurityContext {
190190
runAsNonRoot := true
191191
runAsUser := int64(2000)
192192

193-
return corev1.SecurityContext{RunAsUser: &runAsUser, RunAsNonRoot: &runAsNonRoot}
193+
return &corev1.SecurityContext{RunAsUser: &runAsUser, RunAsNonRoot: &runAsNonRoot}
194194
}

0 commit comments

Comments
 (0)