feat: support setting securityContext for plugin side-car containers

[shajia-deshaw]

Unit tests are passing:

❯ go test ./internal/cnpgi/operator -v -ginkgo.focus="security context"
=== RUN   TestOperator
...
===============================================================================================
Random Seed: 1757319980

Will run 6 of 15 specs
SSSSSSSSS••••••

Ran 6 of 15 Specs in 0.003 seconds
SUCCESS! -- 6 Passed | 0 Failed | 0 Pending | 9 Skipped
--- PASS: TestOperator (0.00s)
PASS
ok      github.com/operasoftware/cnpg-plugin-pgbackrest/internal/cnpgi/operator 0.030s

I've also tested this in our restricted cluster environment and things are now working as expected.

Fixes: #24

[Agalin]

@shajia-deshaw code looks good but you need to squash and rewrite your commits to pass the linter:

[commitlint] ✖   subject may not be empty [subject-empty]
[commitlint] ✖   type may not be empty [type-empty]
[commitlint] ✖   message must be signed off [signed-off-by]
[commitlint] ⚠   body may not be empty [body-empty]
[commitlint] ⚠   references may not be empty [references-empty]

[Agalin]

Pipeline is failing because two generated files have not been updated.

For the manifest.yuaml file:

kustomize build kubernetes -o manifest.yaml 

The zz_generated file should be generated automatically during golang build. If not, then make build should help.

[shajia-deshaw]

@Agalin The current CI error doesn't seem to be related to this PR's change?

[lint] 
[lint] Error: input: container.from.withMountedCache.withMountedCache.withFile.withoutEnvVariable.withMountedCache.withMountedCache.withMountedCache.withMountedCache.withMountedCache.withMountedCache.withMountedCache.withMountedCache.withWorkdir.withMountedDirectory.withMountedFile.withExec.stdout process "golangci-lint run --config /work/config" did not complete successfully: exit code: 1
[lint] 
[lint] Stdout:
[lint] src/internal/cnpgi/common/wal.go:18:9: var-naming: avoid meaningless package names (revive)
[lint] package common
[lint]         ^
[lint] src/internal/pgbackrest/utils/env_utils.go:17:9: var-naming: avoid meaningless package names (revive)
[lint] package utils
[lint]         ^
[lint] 2 issues:
[lint] * revive: 2
[lint] 

[Agalin]

Yeah, I've noticed. 😞 Will try to fix it today. Also I believe we should split CI into smaller parts, it's pretty unreadable as-is.

[Agalin]

@shajia-deshaw if you could rebase, I hope this will be merge'able. 🙂

[Agalin]

Looks like we're really unlucky and, between my fix and the CI re-run, Task maintainers have tagged a few new releases but not published them, causing arduino/setup-task to fail. 🤦 It took them over 40 minutes to publish the release.

[shajia-deshaw]

Thanks for merging, @Agalin! Can I know the new release version so I can use it?

[shajia-deshaw]

Ah, nvm. Noticed this PR: #28 - thanks!