djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add nonroot SCC to work on OpenShift clusters

Browse Source
This commit is contained in:
Mo Khan 2020-11-18 17:08:45 -05:00 committed by GitHub
parent 24bd8b2e42
commit c32e452db8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
deploy/concierge/rbac.yaml
View File

@ -24,6 +24,10 @@ rules:
- apiGroups: [ policy ] - apiGroups: [ policy ]
resources: [ podsecuritypolicies ] resources: [ podsecuritypolicies ]
verbs: [ use ] verbs: [ use ]
- apiGroups: [ security.openshift.io ]
resources: [ securitycontextconstraints ]
verbs: [ use ]
resourceNames: [ nonroot ]
--- ---
kind: ClusterRoleBinding kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1