Skip to content

Commit 4c99b22

Browse files
authored
fix(helm): use same scc as olm (#547)
1 parent 0076362 commit 4c99b22

File tree

1 file changed

+1
-48
lines changed

1 file changed

+1
-48
lines changed

deploy/helm/hbase-operator/templates/roles.yaml

Lines changed: 1 addition & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -99,53 +99,6 @@ rules:
9999
- bind
100100
resourceNames:
101101
- {{ include "operator.name" . }}-clusterrole
102-
103-
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
104-
---
105-
apiVersion: security.openshift.io/v1
106-
kind: SecurityContextConstraints
107-
metadata:
108-
name: hbase-scc
109-
labels:
110-
{{- include "operator.labels" . | nindent 4 }}
111-
annotations:
112-
kubernetes.io/description: |-
113-
This resource is derived from hostmount-anyuid. It provides all the features of the
114-
restricted SCC but allows host mounts and any UID by a pod. This is primarily
115-
used by the persistent volume recycler. WARNING: this SCC allows host file
116-
system access as any UID, including UID 0. Grant with caution.
117-
release.openshift.io/create-only: "true"
118-
allowHostDirVolumePlugin: true
119-
allowHostIPC: false
120-
allowHostNetwork: false
121-
allowHostPID: false
122-
allowHostPorts: false
123-
allowPrivilegeEscalation: true
124-
allowPrivilegedContainer: false
125-
allowedCapabilities: null
126-
defaultAddCapabilities: null
127-
fsGroup:
128-
type: RunAsAny
129-
groups: []
130-
priority: null
131-
readOnlyRootFilesystem: false
132-
runAsUser:
133-
type: RunAsAny
134-
seLinuxContext:
135-
type: MustRunAs
136-
supplementalGroups:
137-
type: RunAsAny
138-
volumes:
139-
- configMap
140-
- downwardAPI
141-
- emptyDir
142-
- hostPath
143-
- nfs
144-
- persistentVolumeClaim
145-
- projected
146-
- secret
147-
- ephemeral
148-
{{ end }}
149102
---
150103
apiVersion: rbac.authorization.k8s.io/v1
151104
kind: ClusterRole
@@ -174,7 +127,7 @@ rules:
174127
resources:
175128
- securitycontextconstraints
176129
resourceNames:
177-
- hbase-scc
130+
- nonroot-v2
178131
verbs:
179132
- use
180133
{{ end }}

0 commit comments

Comments
 (0)