deployment: carry over the securityContext from the deployment config to lifecycle hook

Author: mfojtik

pkg/deploy/strategy/support/lifecycle.go

@@ -375,6 +375,11 @@ func makeHookPod(hook *deployapi.LifecycleHook, rc *kapi.ReplicationController,
 
 	gracePeriod := int64(10)
 
+	podSecurityContext, err := kapi.Scheme.DeepCopy(rc.Spec.Template.Spec.SecurityContext)
+	if err != nil {
+		return nil, fmt.Errorf("unable to copy pod securityContext: %v", err)
+	}
+
 	pod := &kapi.Pod{
 		ObjectMeta: kapi.ObjectMeta{
 			Name: namer.GetPodName(rc.Name, suffix),
@@ -397,8 +402,10 @@ func makeHookPod(hook *deployapi.LifecycleHook, rc *kapi.ReplicationController,
 					Env:             mergedEnv,
 					Resources:       resources,
 					VolumeMounts:    volumeMounts,
+					SecurityContext: baseContainer.SecurityContext,
 				},
 			},
+			SecurityContext:       podSecurityContext,
 			Volumes:               volumes,
 			ActiveDeadlineSeconds: &maxDeploymentDurationSeconds,
 			// Setting the node selector on the hook pod so that it is created