Run container in privileged mode to support docker-in-docker and docker-out-of-docker.

Author: bdpiprava

README.md

@@ -15,7 +15,7 @@ To build the jar, run `./gradlew clean build`
 ## License
 
 ```plain
-Copyright 2017 ThoughtWorks, Inc.
+Copyright 2018 ThoughtWorks, Inc.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

build.gradle

@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 ThoughtWorks, Inc.
+ * Copyright 2018 ThoughtWorks, Inc.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -54,7 +54,7 @@ dependencies {
     compile group: 'com.google.guava', name: 'guava', version: '19.0'
     compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.4'
     compile group: 'joda-time', name: 'joda-time', version: '2.9.4'
-    compile group: 'io.fabric8', name: 'kubernetes-client', version: '3.1.6'
+    compile group: 'io.fabric8', name: 'kubernetes-client', version: '3.1.8'
     compile group: 'com.github.spullara.mustache.java', name: 'compiler', version: '0.9.5'
     compile group: 'org.freemarker', name: 'freemarker', version: '2.3.23'
 
@@ -81,9 +81,9 @@ jar {
     from(configurations.compile) {
         into "lib/"
     }
-    from(sourceSets.main.java) {
-        into "/"
-    }
+//    from(sourceSets.main.java) {
+//        into "/"
+//    }
 }
 
 tasks.withType(Jar) { jarTask ->

src/main/java/cd/go/contrib/elasticagent/KubernetesInstanceFactory.java

@@ -1,5 +1,5 @@
 /*
- * Copyright 2017 ThoughtWorks, Inc.
+ * Copyright 2018 ThoughtWorks, Inc.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -57,6 +57,7 @@ private KubernetesInstance create(CreateAgentRequest request, PluginSettings set
         container.setName(containerName);
         container.setImage(image(request.properties()));
         container.setImagePullPolicy("IfNotPresent");
+        container.setSecurityContext(new SecurityContextBuilder().withPrivileged(true).build());
 
         container.setResources(getPodResources(request));
 

src/main/resources/profile.template.html

@@ -1,5 +1,5 @@
 <!--
-  ~ Copyright 2017 ThoughtWorks, Inc.
+  ~ Copyright 2018 ThoughtWorks, Inc.
   ~
   ~ Licensed under the Apache License, Version 2.0 (the "License");
   ~ you may not use this file except in compliance with the License.
@@ -200,7 +200,9 @@
 spec:
   containers:
     - name: gocd-agent-container-{{ CONTAINER_POSTFIX }}
-      image: {{ GOCD_AGENT_IMAGE }}:{{ LATEST_VERSION }}')">
+      image: {{ GOCD_AGENT_IMAGE }}:{{ LATEST_VERSION }}
+      securityContext:
+        privileged: true')">
             </textarea>
             <span class="form_error form-error" ng-class="{'is-visible': GOINPUTNAME[PodConfiguration].$error.server}"
                   ng-show="GOINPUTNAME[PodConfiguration].$error.server">{{GOINPUTNAME[PodConfiguration].$error.server}}</span>