fix(executor): emissary - make argoexec executable from non-root cont…

…ainers. Fixes argoproj#6238 (argoproj#6247) Signed-off-by: Yuan Gong <[email protected]> Co-authored-by: Alex Collins <[email protected]>
Bobgy · Jul 13, 2021 · d421e90 · d421e90
1 parent a245fe6
commit d421e90
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/workflow/executor/emissary/binary.go b/workflow/executor/emissary/binary.go
@@ -16,7 +16,9 @@ func copyBinary() error {
 		return err
 	}
 	defer func() { _ = in.Close() }()
-	out, err := os.OpenFile("/var/run/argo/argoexec", os.O_RDWR|os.O_CREATE, 0o500) // r-x------
+	// argoexec needs to be executable from non-root user in the main container.
+	// Therefore we set permission 0o555 == r-xr-xr-x.
+	out, err := os.OpenFile("/var/run/argo/argoexec", os.O_RDWR|os.O_CREATE, 0o555)
 	if err != nil {
 		return err
 	}