Merge pull request redhat-appstudio#248 from gabemontero/openshift-perm-fixes

fix lookup-artifact-location and process-build-requests permission issues running on openshfit

Author: gabemontero

pkg/reconciler/artifactbuild/artifactbuild.go

@@ -524,6 +524,7 @@ func createLookupScmInfoTask(gav string, config map[string]string) *pipelinev1be
 		recipes = recipes + "," + additional
 	}
 
+	zero := int64(0)
 	return &pipelinev1beta1.TaskSpec{
 		Results: []pipelinev1beta1.TaskResult{
 			{Name: PipelineResultScmUrl},
@@ -554,6 +555,9 @@ func createLookupScmInfoTask(gav string, config map[string]string) *pipelinev1be
 						"--gav",
 						gav,
 					},
+					SecurityContext: &corev1.SecurityContext{
+						RunAsUser: &zero,
+					},
 				},
 			},
 		},

pkg/reconciler/dependencybuild/dependencybuild.go

@@ -634,6 +634,7 @@ func createLookupBuildInfoPipeline(build *v1alpha1.DependencyBuildSpec, config m
 	if len(path) == 0 {
 		path = "."
 	}
+	zero := int64(0)
 	return &pipelinev1beta1.PipelineSpec{
 		Results: []pipelinev1beta1.PipelineResult{{Name: BuildInfoPipelineMessage, Value: "$(tasks." + artifactbuild.TaskName + ".results." + BuildInfoPipelineMessage + ")"}, {Name: BuildInfoPipelineBuildInfo, Value: "$(tasks." + artifactbuild.TaskName + ".results." + BuildInfoPipelineBuildInfo + ")"}},
 		Tasks: []pipelinev1beta1.PipelineTask{
@@ -664,6 +665,9 @@ func createLookupBuildInfoPipeline(build *v1alpha1.DependencyBuildSpec, config m
 										"--build-info",
 										"$(results." + BuildInfoPipelineBuildInfo + ".path)",
 									},
+									SecurityContext: &v1.SecurityContext{
+										RunAsUser: &zero,
+									},
 								},
 							},
 						},