Add runtimeClassName in Kubernetes backend options

[stevapple]

Resolves #3473

[zc-devs]

Schema suggestion: fixed_schema.patch

[stevapple]

Schema suggestion: fixed_schema.patch

Looks quite reasonable, will take it. Thanks!

Should I do the same gardening for serviceAccountName, or leave it to another PR?

[zc-devs]

Should I do the same gardening for serviceAccountName, or leave it to another PR?

I like the idea. I would do it in separate PR.

[stevapple]

Ping for review/merge

[qwerty287]

Should this be available to all repos/pipelines? Or can it be used to configure stuff that could be dangerous and therefore is only allowed in trusted repos?

[stevapple]

Should this be available to all repos/pipelines?

I think it should.

Or can it be used to configure stuff that could be dangerous and therefore is only allowed in trusted repos?

At least this was clarified in the KEP proposal, that security is a non-goal for this feature, and RuntimeClass is not restricted by the Kubernetes RBAC system.

RuntimeClass should not be used a replacement for PodSecurityPolicy. The use cases for defining multiple RuntimeClasses for the same underlying runtime implementation should be extremely limited (generally only around updates & rollouts). To enforce this, no authorization or restrictions are placed directly on RuntimeClass use; in order to restrict a user to a specific RuntimeClass, you must use another policy mechanism such as PodSecurityPolicy.

[woodpecker-bot]

Deployment of preview was successful: https://woodpecker-ci-woodpecker-pr-3474.surge.sh

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 36.00%. Comparing base (2029813) to head (d4d5312).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #3474   +/-   ##
=======================================
  Coverage   35.99%   36.00%           
=======================================
  Files         231      231           
  Lines       15542    15543    +1     
=======================================
+ Hits         5595     5596    +1     
  Misses       9530     9530           
  Partials      417      417           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.