Propagate security ctx to flyte workflow CRD (flyteorg#422)

Signed-off-by: Katrina Rogan <[email protected]>
eapolinario · May 10, 2022 · 24b3c57 · 24b3c57
1 parent 18e6d2b
commit 24b3c57
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/flyteadmin/pkg/workflowengine/impl/prepare_execution.go b/flyteadmin/pkg/workflowengine/impl/prepare_execution.go
@@ -27,6 +27,7 @@ func addPermissions(securityCtx *core.SecurityContext, roleNameKey string, flyte
 	if securityCtx == nil || securityCtx.RunAs == nil {
 		return
 	}
+	flyteWf.SecurityContext = *securityCtx
 	if len(securityCtx.RunAs.IamRole) > 0 {
 		if flyteWf.Annotations == nil {
 			flyteWf.Annotations = map[string]string{}

diff --git a/flyteadmin/pkg/workflowengine/impl/prepare_execution_test.go b/flyteadmin/pkg/workflowengine/impl/prepare_execution_test.go
@@ -71,6 +71,7 @@ func TestAddPermissions(t *testing.T) {
 			roleNameKey: testRole,
 		})
 		assert.Equal(t, testK8sServiceAccount, flyteWf.ServiceAccountName)
+		assert.True(t, proto.Equal(&flyteWf.SecurityContext, securityCtxFromAuth))
 	})
 
 	t.Run("override using security ctx", func(t *testing.T) {
@@ -80,6 +81,7 @@ func TestAddPermissions(t *testing.T) {
 			roleNameKey: testRoleSc,
 		})
 		assert.Equal(t, testK8sServiceAccountSc, flyteWf.ServiceAccountName)
+		assert.True(t, proto.Equal(&flyteWf.SecurityContext, securityCtx))
 	})
 }