Add SecurityContext to TaskSpec

Author: dicarlo2

docs/tasks.md

@@ -73,6 +73,9 @@ following fields:
     by your `Task`
   - [`volumes`](#volumes) - Specifies one or more volumes that you want to make
     available to your build.
+  - [`securityContext`] - SecurityContext holds pod-level security attributes and 
+    common container settings. Defaults to empty.  See type description for default  
+    values of each field.
 
 [kubernetes-overview]:
   https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/#required-fields

pkg/apis/pipeline/v1alpha1/task_types.go

@@ -49,6 +49,10 @@ type TaskSpec struct {
 	// Volumes is a collection of volumes that are available to mount into the
 	// steps of the build.
 	Volumes []corev1.Volume `json:"volumes,omitempty"`
+	// SecurityContext holds pod-level security attributes and common container settings.
+	// Optional: Defaults to empty.  See type description for default values of each field.
+	// +optional
+	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`
 }
 
 // Check that Task may be validated and defaulted.

pkg/apis/pipeline/v1alpha1/zz_generated.deepcopy.go

@@ -246,6 +246,7 @@ func MakePod(taskRun *v1alpha1.TaskRun, taskSpec v1alpha1.TaskSpec, kubeclient k
 			Containers:         podContainers,
 			ServiceAccountName: taskRun.Spec.ServiceAccount,
 			Volumes:            volumes,
+			SecurityContext:    taskSpec.SecurityContext,
 			NodeSelector:       taskRun.Spec.NodeSelector,
 			Affinity:           taskRun.Spec.Affinity,
 		},