use strings.Cut instead of strings.Split for parsing imageConfig.User
Signed-off-by: Shingo Omura <everpeace@gmail.com>
This commit is contained in:
parent
727b254039
commit
50740a1a0c
@ -136,8 +136,7 @@ func (c *criService) containerSpecOpts(config *runtime.ContainerConfig, imageCon
|
|||||||
} else if securityContext.GetRunAsUser() != nil {
|
} else if securityContext.GetRunAsUser() != nil {
|
||||||
userstr = strconv.FormatInt(securityContext.GetRunAsUser().GetValue(), 10)
|
userstr = strconv.FormatInt(securityContext.GetRunAsUser().GetValue(), 10)
|
||||||
} else if imageConfig.User != "" {
|
} else if imageConfig.User != "" {
|
||||||
parts := strings.Split(imageConfig.User, ":")
|
userstr, _, _ = strings.Cut(imageConfig.User, ":")
|
||||||
userstr = parts[0]
|
|
||||||
}
|
}
|
||||||
specOpts = append(specOpts, customopts.WithAdditionalGIDs(userstr),
|
specOpts = append(specOpts, customopts.WithAdditionalGIDs(userstr),
|
||||||
customopts.WithSupplementalGroups(securityContext.GetSupplementalGroups()))
|
customopts.WithSupplementalGroups(securityContext.GetSupplementalGroups()))
|
||||||
|
@ -372,8 +372,7 @@ func (c *criService) containerSpecOpts(config *runtime.ContainerConfig, imageCon
|
|||||||
} else if securityContext.GetRunAsUser() != nil {
|
} else if securityContext.GetRunAsUser() != nil {
|
||||||
userstr = strconv.FormatInt(securityContext.GetRunAsUser().GetValue(), 10)
|
userstr = strconv.FormatInt(securityContext.GetRunAsUser().GetValue(), 10)
|
||||||
} else if imageConfig.User != "" {
|
} else if imageConfig.User != "" {
|
||||||
parts := strings.Split(imageConfig.User, ":")
|
userstr, _, _ = strings.Cut(imageConfig.User, ":")
|
||||||
userstr = parts[0]
|
|
||||||
}
|
}
|
||||||
specOpts = append(specOpts, customopts.WithAdditionalGIDs(userstr),
|
specOpts = append(specOpts, customopts.WithAdditionalGIDs(userstr),
|
||||||
customopts.WithSupplementalGroups(securityContext.GetSupplementalGroups()))
|
customopts.WithSupplementalGroups(securityContext.GetSupplementalGroups()))
|
||||||
|
Loading…
Reference in New Issue
Block a user