From e381248a64826e693a7eb23988f628ffb70da7cd Mon Sep 17 00:00:00 2001 From: Chad Woolley Date: Wed, 7 May 2025 11:27:30 -0700 Subject: [PATCH] Change workspace scripts volume permission to 555 - See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/190244#note_2490748721 Changelog: fixed --- .../workspace_operations/reconcile/reconcile_constants.rb | 2 +- .../output/desired_config_generator_golden_master_spec.rb | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb b/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb index bd31907166842b..7e8c9925b137ee 100644 --- a/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb +++ b/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb @@ -15,7 +15,7 @@ module ReconcileConstants # Please keep alphabetized RUN_AS_USER = 5001 RUN_POSTSTART_COMMANDS_SCRIPT_NAME = "gl-run-poststart-commands.sh" - WORKSPACE_SCRIPTS_VOLUME_DEFAULT_MODE = 0o774 + WORKSPACE_SCRIPTS_VOLUME_DEFAULT_MODE = 0o555 WORKSPACE_SCRIPTS_VOLUME_NAME = "gl-workspace-scripts" WORKSPACE_SCRIPTS_VOLUME_PATH = "/workspace-scripts" end diff --git a/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb b/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb index 880ea53cf7e3ae..cb3a90391bd846 100644 --- a/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb +++ b/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb @@ -596,7 +596,7 @@ def golden_master_desired_config_with_include_all_resources_true { name: "gl-workspace-scripts", projected: { - defaultMode: 0o774, + defaultMode: 0o555, sources: [ { configMap: { @@ -1170,7 +1170,7 @@ def golden_master_desired_config_with_include_all_resources_false { name: "gl-workspace-scripts", projected: { - defaultMode: 0o774, + defaultMode: 0o555, sources: [ { configMap: { -- GitLab