Skip to content

Commit 6ddefe0

Browse files
authored
fix(helm): use same scc as olm (#614)
1 parent 0fdd0ee commit 6ddefe0

File tree

1 file changed

+1
-47
lines changed

1 file changed

+1
-47
lines changed

deploy/helm/druid-operator/templates/roles.yaml

Lines changed: 1 addition & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -131,52 +131,6 @@ rules:
131131
resourceNames:
132132
- {{ include "operator.name" . }}-clusterrole
133133

134-
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
135-
---
136-
apiVersion: security.openshift.io/v1
137-
kind: SecurityContextConstraints
138-
metadata:
139-
name: druid-scc
140-
labels:
141-
{{- include "operator.labels" . | nindent 4 }}
142-
annotations:
143-
kubernetes.io/description: |-
144-
This resource is derived from hostmount-anyuid. It provides all the features of the
145-
restricted SCC but allows host mounts and any UID by a pod. This is primarily
146-
used by the persistent volume recycler. WARNING: this SCC allows host file
147-
system access as any UID, including UID 0. Grant with caution.
148-
release.openshift.io/create-only: "true"
149-
allowHostDirVolumePlugin: true
150-
allowHostIPC: false
151-
allowHostNetwork: false
152-
allowHostPID: false
153-
allowHostPorts: false
154-
allowPrivilegeEscalation: true
155-
allowPrivilegedContainer: false
156-
allowedCapabilities: null
157-
defaultAddCapabilities: null
158-
fsGroup:
159-
type: RunAsAny
160-
groups: []
161-
priority: null
162-
readOnlyRootFilesystem: false
163-
runAsUser:
164-
type: RunAsAny
165-
seLinuxContext:
166-
type: MustRunAs
167-
supplementalGroups:
168-
type: RunAsAny
169-
volumes:
170-
- configMap
171-
- downwardAPI
172-
- emptyDir
173-
- hostPath
174-
- nfs
175-
- persistentVolumeClaim
176-
- projected
177-
- secret
178-
- ephemeral
179-
{{ end }}
180134
---
181135
apiVersion: rbac.authorization.k8s.io/v1
182136
kind: ClusterRole
@@ -205,7 +159,7 @@ rules:
205159
resources:
206160
- securitycontextconstraints
207161
resourceNames:
208-
- druid-scc
162+
- nonroot-v2
209163
verbs:
210164
- use
211165
{{ end }}

0 commit comments

Comments
 (0)