File tree 1 file changed +1
-48
lines changed
deploy/helm/hbase-operator/templates
1 file changed +1
-48
lines changed Original file line number Diff line number Diff line change @@ -99,53 +99,6 @@ rules:
99
99
- bind
100
100
resourceNames :
101
101
- {{ include "operator.name" . }}-clusterrole
102
-
103
- {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
104
- ---
105
- apiVersion : security.openshift.io/v1
106
- kind : SecurityContextConstraints
107
- metadata :
108
- name : hbase-scc
109
- labels :
110
- {{- include "operator.labels" . | nindent 4 }}
111
- annotations :
112
- kubernetes.io/description : |-
113
- This resource is derived from hostmount-anyuid. It provides all the features of the
114
- restricted SCC but allows host mounts and any UID by a pod. This is primarily
115
- used by the persistent volume recycler. WARNING: this SCC allows host file
116
- system access as any UID, including UID 0. Grant with caution.
117
- release.openshift.io/create-only : " true"
118
- allowHostDirVolumePlugin : true
119
- allowHostIPC : false
120
- allowHostNetwork : false
121
- allowHostPID : false
122
- allowHostPorts : false
123
- allowPrivilegeEscalation : true
124
- allowPrivilegedContainer : false
125
- allowedCapabilities : null
126
- defaultAddCapabilities : null
127
- fsGroup :
128
- type : RunAsAny
129
- groups : []
130
- priority : null
131
- readOnlyRootFilesystem : false
132
- runAsUser :
133
- type : RunAsAny
134
- seLinuxContext :
135
- type : MustRunAs
136
- supplementalGroups :
137
- type : RunAsAny
138
- volumes :
139
- - configMap
140
- - downwardAPI
141
- - emptyDir
142
- - hostPath
143
- - nfs
144
- - persistentVolumeClaim
145
- - projected
146
- - secret
147
- - ephemeral
148
- {{ end }}
149
102
---
150
103
apiVersion : rbac.authorization.k8s.io/v1
151
104
kind : ClusterRole
@@ -174,7 +127,7 @@ rules:
174
127
resources :
175
128
- securitycontextconstraints
176
129
resourceNames :
177
- - hbase-scc
130
+ - nonroot-v2
178
131
verbs :
179
132
- use
180
133
{{ end }}
You can’t perform that action at this time.
0 commit comments