During Pipeline configuration/execution with Infrastructure Configured over K8s Cluster Advanced options allow us to configure the Pipeline Pod's securityContext using following block:
containerSecurityContext:
capabilities:
drop:
- ALL
privileged: false
allowPrivilegeEscalation: false
runAsNonRoot: true
runAsUser: "1000"
In case the checkbox to enable these settings is are left unchecked/unset, we still want the following to be configured for the pipeline spec explicitly.
capabilities:
drop:
- ALL
privileged: false
allowPrivilegeEscalation: false
runAsNonRoot: true
runAsUser: "1000"