File tree Expand file tree Collapse file tree 1 file changed +1
-45
lines changed
deploy/helm/hdfs-operator/templates Expand file tree Collapse file tree 1 file changed +1
-45
lines changed Original file line number Diff line number Diff line change @@ -141,50 +141,6 @@ rules:
141
141
- bind
142
142
resourceNames :
143
143
- {{ include "operator.name" . }}-clusterrole
144
- {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
145
- ---
146
- apiVersion : security.openshift.io/v1
147
- kind : SecurityContextConstraints
148
- metadata :
149
- name : hdfs-scc
150
- labels :
151
- {{- include "operator.labels" . | nindent 4 }}
152
- annotations :
153
- kubernetes.io/description : |-
154
- This resource is derived from hostmount-anyuid. It provides all the features of the
155
- restricted SCC but allows host mounts and any UID by a pod. This is primarily
156
- used by the persistent volume recycler. WARNING: this SCC allows host file
157
- system access as any UID, including UID 0. Grant with caution.
158
- release.openshift.io/create-only : " true"
159
- allowHostDirVolumePlugin : true
160
- allowHostIPC : false
161
- allowHostNetwork : false
162
- allowHostPID : false
163
- allowHostPorts : false
164
- allowPrivilegeEscalation : true
165
- allowPrivilegedContainer : false
166
- allowedCapabilities : null
167
- defaultAddCapabilities : null
168
- fsGroup :
169
- type : RunAsAny
170
- readOnlyRootFilesystem : false
171
- runAsUser :
172
- type : RunAsAny
173
- seLinuxContext :
174
- type : MustRunAs
175
- supplementalGroups :
176
- type : RunAsAny
177
- volumes :
178
- - configMap
179
- - downwardAPI
180
- - emptyDir
181
- - hostPath
182
- - nfs
183
- - persistentVolumeClaim
184
- - projected
185
- - secret
186
- - ephemeral
187
- {{ end }}
188
144
---
189
145
apiVersion : rbac.authorization.k8s.io/v1
190
146
kind : ClusterRole
@@ -220,7 +176,7 @@ rules:
220
176
resources :
221
177
- securitycontextconstraints
222
178
resourceNames :
223
- - hdfs-scc
179
+ - nonroot-v2
224
180
verbs :
225
181
- use
226
182
{{ end }}
You can’t perform that action at this time.
0 commit comments