fix(executor): emissary - make argoexec executable from non-root cont…

…ainers. Fixes #6238 (#6247)

Signed-off-by: Yuan Gong <gongyuan94@gmail.com>

Co-authored-by: Alex Collins <alexec@users.noreply.github.com>

workflow/executor/emissary/binary.go

@@ -16,7 +16,9 @@ func copyBinary() error {
 		return err
 	}
 	defer func() { _ = in.Close() }()
-	out, err := os.OpenFile("/var/run/argo/argoexec", os.O_RDWR|os.O_CREATE, 0o500) // r-x------
+	// argoexec needs to be executable from non-root user in the main container.
+	// Therefore we set permission 0o555 == r-xr-xr-x.
+	out, err := os.OpenFile("/var/run/argo/argoexec", os.O_RDWR|os.O_CREATE, 0o555)
 	if err != nil {
 		return err
 	}