Updated Kubernetes pod creation to use sh -c to bypass selinux issues (…

…#982) Co-authored-by: Alastair Pitts <APErebus@users.noreply.github.com>
OctopusDeploy · Aug 6, 2024 · f1e9679 · f1e9679
1 parent 8a45a56
commit f1e9679
Showing 1 changed file with 11 additions and 4 deletions.
diff --git a/source/Octopus.Tentacle/Kubernetes/KubernetesScriptPodCreator.cs b/source/Octopus.Tentacle/Kubernetes/KubernetesScriptPodCreator.cs
@@ -256,17 +256,24 @@ protected async Task<V1Container> CreateScriptContainer(StartKubernetesScriptCom
 
             var resourceRequirements = GetScriptPodResourceRequirements(tentacleScriptLog);
 
+            var commandString = string.Join(" ", new[] {                         
+                $"{homeDir}/Work/{command.ScriptTicket.TaskId}/bootstrapRunner",
+                Path.Combine(homeDir, workspacePath),
+                Path.Combine(homeDir, workspacePath, scriptName)
+            }.Concat(scriptArguments ?? Array.Empty<string>())
+            .Select(x => $"\"{x}\""));
+
             return new V1Container
             {
                 Name = podName,
                 Image = command.PodImageConfiguration?.Image ?? await containerResolver.GetContainerImageForCluster(),
-                Command = new List<string> { $"{homeDir}/Work/{command.ScriptTicket.TaskId}/bootstrapRunner" },
                 ImagePullPolicy = KubernetesConfig.ScriptPodPullPolicy,
+                Command = new List<string> { "sh" },
                 Args = new List<string>
                     {
-                        Path.Combine(homeDir, workspacePath),
-                        Path.Combine(homeDir, workspacePath, scriptName)
-                    }.Concat(scriptArguments ?? Array.Empty<string>())
+                        "-c",
+                        commandString
+                    }
                     .ToList(),
                 VolumeMounts = new List<V1VolumeMount> { new(homeDir, "tentacle-home") },
                 Env = new List<V1EnvVar>