Bug 1846689

Document URL: https://docs.openshift.com/container-platform/4.4/pipelines/creating-applications-with-cicd-pipelines.html#creating-pipeline-tasks_creating-applications-with-cicd-pipelines

Section Number and Name: Section 3 Creating Pipeline Tasks

Describe the issue: 

Openshift Pipelines is introduced as a TP feature in OCP 4.4 and all its concepts are clearly listed out in the documentation. But the operator installs some additional ClusterTasks like buildah and s2i-python-3.

While digging through the operator code[1], it is found that buildah runs in a privileged security context that means running a privileged container.

[1] https://github.com/openshift/tektoncd-pipeline-operator/blob/master/deploy/resources/v0.11.3/addons/03-clustertasks/buildah/buildah-task.yaml#L45

Current documentation shows: Use the tkn clustertasks list command to list the Operator-installed additional ClusterTasks, for example --buildah and s2i-python-3:

Expected documentation: Add a note with the above point that buildah clustertask runs in the privileged security context.


Suggestions for improvement: Please add a note that buildah clustertask runs in a privileged security context.

Additional information: