feat(executors-k8s): improve handling for security context

[michaellzc]

ref PLAT-463

unfortunatelly executor.securityConext.privieleged (defaults to false now) is impossible to be backward compatible, so we make sure the same default is carryover to executor.containerSecurityContext. which has a default of privileged=false.

Checklist

• Follow the manual testing process
• Update changelog
• Update Kubernetes update doc

[michaellzc]

• feat(executors-k8s): improve handling for security context #835 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[sourcegraph-release-bot]

The backport to 7.0.x failed at https://github.com/sourcegraph/deploy-sourcegraph-helm/actions/runs/23057791298:

Reviews may only be requested from collaborators. One or more of the teams you specified is not a collaborator of the sourcegraph/deploy-sourcegraph-helm repository.

To backport this PR manually, you can either:

Via the sg tool

Use the sg backport command to backport your commit to the release branch.

sg backport -r 7.0.x -p 835

Via your terminal

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-7.0.x 7.0.x
# Navigate to the new working tree
cd .worktrees/backport-7.0.x
# Create a new branch
git switch --create backport-835-to-7.0.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 15b93786e6f4f926cc4e860f54b3d9d6c788efc8
# Push it to GitHub
git push --set-upstream origin backport-835-to-7.0.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-7.0.x

If you encouter conflict, first resolve the conflict and stage all files, then run the commands below:

git cherry-pick --continue
# Push it to GitHub
git push --set-upstream origin backport-835-to-7.0.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-7.0.x

• Follow above instructions to backport the commit.
• Create a pull request where the base branch is 7.0.x and the compare/head branch is backport-835-to-7.0.x., click here to create the pull request.

Once the pull request has been created, please ensure the following:

• Make sure to tag @sourcegraph/release in the pull request description.

• kindly remove the release-blocker from this pull request.