Support the user key in the docker executor configuration. This allows you to execute task-agent with a different user than the image’s default. Due to limitations of the Kubernetes API, this feature has some caveats:
This key is only supported on the primary container. Service containers will continue to run as the default user.
Some user environment variables, such as $PATH, may be reset.
Further reduction in the memory footprint of Container Runner. This includes a fix for a memory leak that could cause the container-agent Pod to use excess memory and unexpectedly crash under certain workloads.
Fix for a bug that caused tokens for private AWS ECR images to be cached beyond their expiry, potentially causing image pull errors.
Both Machine and Container Runner:
Optimize the download and storage caching of new task agent versions.