Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package kubectl-browse-pvc for 
openSUSE:Factory checked in at 2025-03-31 11:42:20
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/kubectl-browse-pvc (Old)
 and      /work/SRC/openSUSE:Factory/.kubectl-browse-pvc.new.2696 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "kubectl-browse-pvc"

Mon Mar 31 11:42:20 2025 rev:6 rq:1265362 version:1.3.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/kubectl-browse-pvc/kubectl-browse-pvc.changes    
2025-02-20 16:46:28.165328184 +0100
+++ 
/work/SRC/openSUSE:Factory/.kubectl-browse-pvc.new.2696/kubectl-browse-pvc.changes
  2025-03-31 11:43:31.641023796 +0200
@@ -1,0 +2,9 @@
+Sat Mar 29 07:51:26 UTC 2025 - Johannes Kastl 
<[email protected]>
+
+- Update to version 1.3.0:
+  * update go.mod
+  * Update README.md
+  * Bump golang.org/x/net from 0.33.0 to 0.36.0 in /src
+  * Add option to pass in uid
+
+-------------------------------------------------------------------

Old:
----
  kubectl-browse-pvc-1.2.0.obscpio

New:
----
  kubectl-browse-pvc-1.3.0.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ kubectl-browse-pvc.spec ++++++
--- /var/tmp/diff_new_pack.O9hlOI/_old  2025-03-31 11:43:33.369095461 +0200
+++ /var/tmp/diff_new_pack.O9hlOI/_new  2025-03-31 11:43:33.373095627 +0200
@@ -19,14 +19,14 @@
 %define executable_name kubectl-browse_pvc
 
 Name:           kubectl-browse-pvc
-Version:        1.2.0
+Version:        1.3.0
 Release:        0
 Summary:        Kubectl plugin for browsing PVCs on the command line
 License:        MIT
 URL:            https://github.com/clbx/kubectl-browse-pvc
 Source:         %{name}-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  go1.22
+BuildRequires:  go1.23
 
 %description
 I constantly found myself spinning up dummy pods to exec into them so I could

++++++ _service ++++++
--- /var/tmp/diff_new_pack.O9hlOI/_old  2025-03-31 11:43:33.405096955 +0200
+++ /var/tmp/diff_new_pack.O9hlOI/_new  2025-03-31 11:43:33.409097121 +0200
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/clbx/kubectl-browse-pvc</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.2.0</param>
+    <param name="revision">v1.3.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.O9hlOI/_old  2025-03-31 11:43:33.429097951 +0200
+++ /var/tmp/diff_new_pack.O9hlOI/_new  2025-03-31 11:43:33.429097951 +0200
@@ -1,6 +1,6 @@
 <servicedata>
 <service name="tar_scm">
                 <param 
name="url">https://github.com/clbx/kubectl-browse-pvc</param>
-              <param 
name="changesrevision">40ba69bcf0771d71ee038e6da80b2e463139d416</param></service></servicedata>
+              <param 
name="changesrevision">855f6fde2eb3c70521e075270fd2d79a9c0d8f2f</param></service></servicedata>
 (No newline at EOF)
 

++++++ kubectl-browse-pvc-1.2.0.obscpio -> kubectl-browse-pvc-1.3.0.obscpio 
++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/kubectl-browse-pvc-1.2.0/.github/workflows/build.yaml 
new/kubectl-browse-pvc-1.3.0/.github/workflows/build.yaml
--- old/kubectl-browse-pvc-1.2.0/.github/workflows/build.yaml   2025-02-20 
06:50:12.000000000 +0100
+++ new/kubectl-browse-pvc-1.3.0/.github/workflows/build.yaml   1970-01-01 
01:00:00.000000000 +0100
@@ -1,121 +0,0 @@
-name: Build Job
-
-on:
-  workflow_call:
-    inputs:
-      version:
-        required: true
-        type: string
-
-jobs:
-  build-darwin-arm:
-    runs-on: macos-latest
-    steps:
-    - name: Set up Go
-      uses: actions/[email protected]
-      with:
-        go-version: "1.22.0"
-
-    - name: Check out Code
-      uses: actions/[email protected]
-
-    - name: Build
-      run: |
-        cd src
-        go build -v -ldflags "-X main.Version=${{ inputs.version }}" -o 
kubectl-browse-pvc .
-        mv kubectl-browse-pvc ..
-
-    - name: Fix permissions
-      run: chmod +x ./kubectl-browse-pvc
-
-    - name: Upload Artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: kubectl-browse-pvc-darwin-arm
-        path: |
-          ./kubectl-browse-pvc
-          LICENSE
-
-  build-darwin-x86_64:
-    runs-on: macos-13
-    steps:
-    - name: Set up Go
-      uses: actions/[email protected]
-      with:
-        go-version: "1.22.0"
-
-    - name: Check out Code
-      uses: actions/[email protected]
-
-    - name: Build
-      run: |
-        cd src
-        go build -v -ldflags "-X main.Version=${{ inputs.version }}" -o 
kubectl-browse-pvc .
-        mv kubectl-browse-pvc ..
-
-    - name: Fix permissions
-      run: chmod +x ./kubectl-browse-pvc
-
-    - name: Upload Artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: kubectl-browse-pvc-darwin-x86_64
-        path: |
-          ./kubectl-browse-pvc
-          LICENSE
-
-  build-linux-x86_64:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Set up Go
-      uses: actions/[email protected]
-      with:
-        go-version: "1.22.0"
-
-    - name: Check out Code
-      uses: actions/[email protected]
-
-    - name: Build
-      run: |
-        cd src
-        go build -v -ldflags "-X main.Version=${{ inputs.version }}" -o 
kubectl-browse-pvc .
-        mv kubectl-browse-pvc ..
-
-    - name: Fix permissions
-      run: chmod +x ./kubectl-browse-pvc
-
-    - name: Upload Artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: kubectl-browse-pvc-linux-x86_64
-        path: |
-          ./kubectl-browse-pvc
-          LICENSE
-
-  build-linux-arm:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Set up Go
-      uses: actions/[email protected]
-      with:
-        go-version: "1.22.0"
-
-    - name: Check out Code
-      uses: actions/[email protected]
-
-    - name: Build
-      run: |
-        cd src
-        GOARCH=arm64 go build -v -ldflags "-X main.Version=${{ inputs.version 
}}" -o kubectl-browse-pvc .
-        mv kubectl-browse-pvc ..
-
-    - name: Fix permissions
-      run: chmod +x ./kubectl-browse-pvc
-
-    - name: Upload Artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: kubectl-browse-pvc-linux-arm
-        path: |
-          ./kubectl-browse-pvc
-          LICENSE
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/.github/workflows/main.yaml 
new/kubectl-browse-pvc-1.3.0/.github/workflows/main.yaml
--- old/kubectl-browse-pvc-1.2.0/.github/workflows/main.yaml    2025-02-20 
06:50:12.000000000 +0100
+++ new/kubectl-browse-pvc-1.3.0/.github/workflows/main.yaml    1970-01-01 
01:00:00.000000000 +0100
@@ -1,14 +0,0 @@
-name: Build & Test
-
-on:
-  push:
-    branches:
-    - main
-
-jobs:
-  build:
-    uses: ./.github/workflows/build.yaml
-    with:
-      version: ${GITHUB_SHA::7}
-
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/kubectl-browse-pvc-1.2.0/.github/workflows/release.yaml 
new/kubectl-browse-pvc-1.3.0/.github/workflows/release.yaml
--- old/kubectl-browse-pvc-1.2.0/.github/workflows/release.yaml 2025-02-20 
06:50:12.000000000 +0100
+++ new/kubectl-browse-pvc-1.3.0/.github/workflows/release.yaml 1970-01-01 
01:00:00.000000000 +0100
@@ -1,66 +0,0 @@
-name: Release
-permissions:
-  contents: write
-on:
-  push:
-    tags:
-    - "v*.*.*"
-jobs:
-  build:
-    uses: ./.github/workflows/build.yaml
-    with:
-      version: ${{ github.ref_name }}
-  create-release:
-    runs-on: ubuntu-latest
-    needs: build
-    steps:
-    - name: Download Artifacts
-      uses: actions/download-artifact@v4
-
-    - name: ls
-      run: ls -R
-
-    - name: Fix permissions linux x86_64
-      run: chmod +x kubectl-browse-pvc-linux-x86_64/kubectl-browse-pvc
-
-    - name: Fix permissions linux arm64
-      run: chmod +x kubectl-browse-pvc-linux-arm/kubectl-browse-pvc
-
-    - name: Fix permissions darwin arm64
-      run: chmod +x kubectl-browse-pvc-darwin-arm/kubectl-browse-pvc
-
-    - name: Fix permissions darwin x86_64
-      run: chmod +x kubectl-browse-pvc-darwin-x86_64/kubectl-browse-pvc
-
-    - name: Zip linux x86_64
-      uses: montudor/action-zip@v1
-      with:
-        args: zip -j kubectl-browse-pvc-linux-x86_64.zip 
kubectl-browse-pvc-linux-x86_64/kubectl-browse-pvc 
kubectl-browse-pvc-linux-x86_64/LICENSE
-
-    - name: Zip linux arm64
-      uses: montudor/action-zip@v1
-      with:
-        args: zip -j kubectl-browse-pvc-linux-arm.zip 
kubectl-browse-pvc-linux-arm/kubectl-browse-pvc 
kubectl-browse-pvc-linux-arm/LICENSE
-
-    - name: Zip darwin arm64
-      uses: montudor/action-zip@v1
-      with:
-        args: zip -j kubectl-browse-pvc-darwin-arm.zip 
kubectl-browse-pvc-darwin-arm/kubectl-browse-pvc 
kubectl-browse-pvc-darwin-arm/LICENSE
-
-    - name: Zip darwin x86_64
-      uses: montudor/action-zip@v1
-      with:
-        args: zip -j kubectl-browse-pvc-darwin-x86_64.zip 
kubectl-browse-pvc-darwin-x86_64/kubectl-browse-pvc 
kubectl-browse-pvc-darwin-x86_64/LICENSE
-
-    - name: Create Release
-      id: create_release
-      uses: ncipollo/release-action@v1
-      with:
-        artifacts: 
"kubectl-browse-pvc-darwin-arm.zip,kubectl-browse-pvc-darwin-x86_64.zip,kubectl-browse-pvc-linux-x86_64.zip,kubectl-browse-pvc-linux-arm.zip"
-        artifactErrorsFailBuild: true
-
-    - name: Check out Code
-      uses: actions/[email protected]
-
-    - name: Update Krew
-      uses: rajatjindal/[email protected]
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/.gitignore 
new/kubectl-browse-pvc-1.3.0/.gitignore
--- old/kubectl-browse-pvc-1.2.0/.gitignore     2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/.gitignore     1970-01-01 01:00:00.000000000 
+0100
@@ -1 +0,0 @@
-kubectl-browse-pvc
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/README.md 
new/kubectl-browse-pvc-1.3.0/README.md
--- old/kubectl-browse-pvc-1.2.0/README.md      2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/README.md      2025-03-28 21:10:01.000000000 
+0100
@@ -15,7 +15,14 @@
 ```
 On a PVC. The tool spins up a pod that mounts the PVC and then execs into it 
allowing you to modify the contents of the PVC. The Job finishes and cleans up 
the pod when you disconnect.
 
-Commands can also be described to run a command instead of popping a shell
+
+Commands can be described to run a command instead of popping a shell
 ```
 kubectl browse-pvc <pvc-name> -- <command> 
 ```
+
+
+A User ID can be described to set the user the container runs as
+```
+kubectl browse-pvc -u 1000 <pvc-name>
+```
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/src/go.mod 
new/kubectl-browse-pvc-1.3.0/src/go.mod
--- old/kubectl-browse-pvc-1.2.0/src/go.mod     2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/src/go.mod     2025-03-28 21:10:01.000000000 
+0100
@@ -1,11 +1,13 @@
 module github.com/clbx/kubectl-browse-pvc
 
-go 1.22.0
+go 1.23.0
+
+toolchain go1.24.1
 
 require (
        github.com/briandowns/spinner v1.23.0
        github.com/spf13/cobra v1.7.0
-       golang.org/x/term v0.27.0
+       golang.org/x/term v0.29.0
        k8s.io/api v0.30.1
        k8s.io/apimachinery v0.30.1
        k8s.io/cli-runtime v0.30.1
@@ -52,11 +54,11 @@
        github.com/spf13/pflag v1.0.5 // indirect
        github.com/xlab/treeprint v1.2.0 // indirect
        go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
-       golang.org/x/net v0.33.0 // indirect
+       golang.org/x/net v0.36.0 // indirect
        golang.org/x/oauth2 v0.10.0 // indirect
-       golang.org/x/sync v0.10.0 // indirect
-       golang.org/x/sys v0.28.0 // indirect
-       golang.org/x/text v0.21.0 // indirect
+       golang.org/x/sync v0.11.0 // indirect
+       golang.org/x/sys v0.30.0 // indirect
+       golang.org/x/text v0.22.0 // indirect
        golang.org/x/time v0.3.0 // indirect
        google.golang.org/appengine v1.6.7 // indirect
        google.golang.org/protobuf v1.33.0 // indirect
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/src/go.sum 
new/kubectl-browse-pvc-1.3.0/src/go.sum
--- old/kubectl-browse-pvc-1.2.0/src/go.sum     2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/src/go.sum     2025-03-28 21:10:01.000000000 
+0100
@@ -175,8 +175,8 @@
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod 
h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod 
h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod 
h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
-golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
+golang.org/x/net v0.36.0/go.mod h1:bFmbeoIPfrw4sMHNhb4J9f6+tPziuGjq7Jk/38fxi1I=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod 
h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.10.0 h1:zHCpF2Khkwy4mMB4bv0U37YtJdTGW8jI0glAApi0Kh8=
 golang.org/x/oauth2 v0.10.0/go.mod 
h1:kTpgurOux7LqtuxjuyZa4Gj2gdezIt/jQtGnNFfypQI=
@@ -185,8 +185,8 @@
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod 
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod 
h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w=
+golang.org/x/sync v0.11.0/go.mod 
h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod 
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod 
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod 
h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -195,16 +195,16 @@
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod 
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod 
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod 
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
+golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20220526004731-065cf7ba2467/go.mod 
h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q=
-golang.org/x/term v0.27.0/go.mod 
h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM=
+golang.org/x/term v0.29.0 h1:L6pJp37ocefwRRtYPKSWOWzOtWSxVajvz2ldH/xi3iU=
+golang.org/x/term v0.29.0/go.mod 
h1:6bl4lRlvVuDgSf3179VpIxBF0o10JUpXWOnI7nErv7s=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
-golang.org/x/text v0.21.0/go.mod 
h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
+golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
+golang.org/x/text v0.22.0/go.mod 
h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
 golang.org/x/time v0.3.0 h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=
 golang.org/x/time v0.3.0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod 
h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/src/main.go 
new/kubectl-browse-pvc-1.3.0/src/main.go
--- old/kubectl-browse-pvc-1.2.0/src/main.go    2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/src/main.go    2025-03-28 21:10:01.000000000 
+0100
@@ -27,6 +27,7 @@
 
 var image string
 var Version string
+var containerUser int
 
 func main() {
 
@@ -50,6 +51,7 @@
        }
 
        rootCmd.Flags().StringVarP(&image, "image", "i", "alpine", "Image to 
mount job to")
+       rootCmd.Flags().IntVarP(&containerUser, "container-user", "u", 0, "User 
ID to run the container as")
        kubeConfigFlags.AddFlags(rootCmd.Flags())
 
        if err := rootCmd.Execute(); err != nil {
@@ -119,6 +121,7 @@
                cmd:       []string{"/bin/sh", "-c", "--"},
                args:      commandArgs,
                node:      node,
+               user:      int64(containerUser),
        }
 
        // Build the Job
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/kubectl-browse-pvc-1.2.0/src/util.go 
new/kubectl-browse-pvc-1.3.0/src/util.go
--- old/kubectl-browse-pvc-1.2.0/src/util.go    2025-02-20 06:50:12.000000000 
+0100
+++ new/kubectl-browse-pvc-1.3.0/src/util.go    2025-03-28 21:10:01.000000000 
+0100
@@ -13,6 +13,7 @@
        cmd       []string
        args      []string
        node      string
+       user      int64
 }
 
 var script = `
@@ -56,6 +57,29 @@
                options.args = []string{script}
        }
 
+       // Setup SecurityContext
+       var allowPrivilegeEscalation bool
+       var runAsNonRoot bool
+       if options.user == 0 {
+               runAsNonRoot = false
+               allowPrivilegeEscalation = true
+       } else {
+               runAsNonRoot = true
+               allowPrivilegeEscalation = false
+       }
+
+       securityContext := corev1.SecurityContext{
+               RunAsUser:                &options.user,
+               RunAsNonRoot:             &runAsNonRoot,
+               AllowPrivilegeEscalation: &allowPrivilegeEscalation,
+               Capabilities: &corev1.Capabilities{
+                       Drop: []corev1.Capability{"ALL"},
+               },
+               SeccompProfile: &corev1.SeccompProfile{
+                       Type: "RuntimeDefault",
+               },
+       }
+
        TTLSecondsAfterFinished := new(int32)
        *TTLSecondsAfterFinished = 10
 
@@ -78,10 +102,11 @@
                                        NodeName:      options.node,
                                        Containers: []corev1.Container{
                                                {
-                                                       Name:    "browser",
-                                                       Image:   image,
-                                                       Command: options.cmd,
-                                                       Args:    options.args,
+                                                       Name:            
"browser",
+                                                       Image:           image,
+                                                       Command:         
options.cmd,
+                                                       Args:            
options.args,
+                                                       SecurityContext: 
&securityContext,
                                                        Env: []corev1.EnvVar{
                                                                {
                                                                        Name:  
"PS1",

++++++ kubectl-browse-pvc.obsinfo ++++++
--- /var/tmp/diff_new_pack.O9hlOI/_old  2025-03-31 11:43:33.537102433 +0200
+++ /var/tmp/diff_new_pack.O9hlOI/_new  2025-03-31 11:43:33.545102765 +0200
@@ -1,5 +1,5 @@
 name: kubectl-browse-pvc
-version: 1.2.0
-mtime: 1740030612
-commit: 40ba69bcf0771d71ee038e6da80b2e463139d416
+version: 1.3.0
+mtime: 1743192601
+commit: 855f6fde2eb3c70521e075270fd2d79a9c0d8f2f
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/kubectl-browse-pvc/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.kubectl-browse-pvc.new.2696/vendor.tar.gz differ: 
char 5, line 1

Reply via email to