Skip to content

Commit 3bbe8ee

Browse files
authored
fix(helm): use same scc as olm (#630)
1 parent 90dd24c commit 3bbe8ee

File tree

1 file changed

+1
-48
lines changed

1 file changed

+1
-48
lines changed

deploy/helm/trino-operator/templates/roles.yaml

Lines changed: 1 addition & 48 deletions
Original file line numberDiff line numberDiff line change
@@ -155,53 +155,6 @@ rules:
155155
- bind
156156
resourceNames:
157157
- {{ include "operator.name" . }}-clusterrole
158-
159-
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
160-
---
161-
apiVersion: security.openshift.io/v1
162-
kind: SecurityContextConstraints
163-
metadata:
164-
name: trino-scc
165-
labels:
166-
{{- include "operator.labels" . | nindent 4 }}
167-
annotations:
168-
kubernetes.io/description: |-
169-
This resource is derived from hostmount-anyuid. It provides all the features of the
170-
restricted SCC but allows host mounts and any UID by a pod. This is primarily
171-
used by the persistent volume recycler. WARNING: this SCC allows host file
172-
system access as any UID, including UID 0. Grant with caution.
173-
release.openshift.io/create-only: "true"
174-
allowHostDirVolumePlugin: true
175-
allowHostIPC: false
176-
allowHostNetwork: false
177-
allowHostPID: false
178-
allowHostPorts: false
179-
allowPrivilegeEscalation: true
180-
allowPrivilegedContainer: false
181-
allowedCapabilities: null
182-
defaultAddCapabilities: null
183-
fsGroup:
184-
type: RunAsAny
185-
groups: []
186-
priority: null
187-
readOnlyRootFilesystem: false
188-
runAsUser:
189-
type: RunAsAny
190-
seLinuxContext:
191-
type: MustRunAs
192-
supplementalGroups:
193-
type: RunAsAny
194-
volumes:
195-
- configMap
196-
- downwardAPI
197-
- emptyDir
198-
- hostPath
199-
- nfs
200-
- persistentVolumeClaim
201-
- projected
202-
- secret
203-
- ephemeral
204-
{{ end }}
205158
---
206159
apiVersion: rbac.authorization.k8s.io/v1
207160
kind: ClusterRole
@@ -230,7 +183,7 @@ rules:
230183
resources:
231184
- securitycontextconstraints
232185
resourceNames:
233-
- trino-scc
186+
- nonroot-v2
234187
verbs:
235188
- use
236189
{{ end }}

0 commit comments

Comments
 (0)