File tree 1 file changed +1
-48
lines changed
deploy/helm/trino-operator/templates
1 file changed +1
-48
lines changed Original file line number Diff line number Diff line change @@ -155,53 +155,6 @@ rules:
155
155
- bind
156
156
resourceNames :
157
157
- {{ include "operator.name" . }}-clusterrole
158
-
159
- {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
160
- ---
161
- apiVersion : security.openshift.io/v1
162
- kind : SecurityContextConstraints
163
- metadata :
164
- name : trino-scc
165
- labels :
166
- {{- include "operator.labels" . | nindent 4 }}
167
- annotations :
168
- kubernetes.io/description : |-
169
- This resource is derived from hostmount-anyuid. It provides all the features of the
170
- restricted SCC but allows host mounts and any UID by a pod. This is primarily
171
- used by the persistent volume recycler. WARNING: this SCC allows host file
172
- system access as any UID, including UID 0. Grant with caution.
173
- release.openshift.io/create-only : " true"
174
- allowHostDirVolumePlugin : true
175
- allowHostIPC : false
176
- allowHostNetwork : false
177
- allowHostPID : false
178
- allowHostPorts : false
179
- allowPrivilegeEscalation : true
180
- allowPrivilegedContainer : false
181
- allowedCapabilities : null
182
- defaultAddCapabilities : null
183
- fsGroup :
184
- type : RunAsAny
185
- groups : []
186
- priority : null
187
- readOnlyRootFilesystem : false
188
- runAsUser :
189
- type : RunAsAny
190
- seLinuxContext :
191
- type : MustRunAs
192
- supplementalGroups :
193
- type : RunAsAny
194
- volumes :
195
- - configMap
196
- - downwardAPI
197
- - emptyDir
198
- - hostPath
199
- - nfs
200
- - persistentVolumeClaim
201
- - projected
202
- - secret
203
- - ephemeral
204
- {{ end }}
205
158
---
206
159
apiVersion : rbac.authorization.k8s.io/v1
207
160
kind : ClusterRole
@@ -230,7 +183,7 @@ rules:
230
183
resources :
231
184
- securitycontextconstraints
232
185
resourceNames :
233
- - trino-scc
186
+ - nonroot-v2
234
187
verbs :
235
188
- use
236
189
{{ end }}
You can’t perform that action at this time.
0 commit comments