File tree 1 file changed +1
-47
lines changed
deploy/helm/druid-operator/templates
1 file changed +1
-47
lines changed Original file line number Diff line number Diff line change @@ -131,52 +131,6 @@ rules:
131
131
resourceNames :
132
132
- {{ include "operator.name" . }}-clusterrole
133
133
134
- {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
135
- ---
136
- apiVersion : security.openshift.io/v1
137
- kind : SecurityContextConstraints
138
- metadata :
139
- name : druid-scc
140
- labels :
141
- {{- include "operator.labels" . | nindent 4 }}
142
- annotations :
143
- kubernetes.io/description : |-
144
- This resource is derived from hostmount-anyuid. It provides all the features of the
145
- restricted SCC but allows host mounts and any UID by a pod. This is primarily
146
- used by the persistent volume recycler. WARNING: this SCC allows host file
147
- system access as any UID, including UID 0. Grant with caution.
148
- release.openshift.io/create-only : " true"
149
- allowHostDirVolumePlugin : true
150
- allowHostIPC : false
151
- allowHostNetwork : false
152
- allowHostPID : false
153
- allowHostPorts : false
154
- allowPrivilegeEscalation : true
155
- allowPrivilegedContainer : false
156
- allowedCapabilities : null
157
- defaultAddCapabilities : null
158
- fsGroup :
159
- type : RunAsAny
160
- groups : []
161
- priority : null
162
- readOnlyRootFilesystem : false
163
- runAsUser :
164
- type : RunAsAny
165
- seLinuxContext :
166
- type : MustRunAs
167
- supplementalGroups :
168
- type : RunAsAny
169
- volumes :
170
- - configMap
171
- - downwardAPI
172
- - emptyDir
173
- - hostPath
174
- - nfs
175
- - persistentVolumeClaim
176
- - projected
177
- - secret
178
- - ephemeral
179
- {{ end }}
180
134
---
181
135
apiVersion : rbac.authorization.k8s.io/v1
182
136
kind : ClusterRole
@@ -205,7 +159,7 @@ rules:
205
159
resources :
206
160
- securitycontextconstraints
207
161
resourceNames :
208
- - druid-scc
162
+ - nonroot-v2
209
163
verbs :
210
164
- use
211
165
{{ end }}
You can’t perform that action at this time.
0 commit comments