Add nonroot SCC to work on OpenShift clusters

2020-11-18 17:08:45 -05:00 · 2020-11-18 17:08:45 -05:00 · c32e452db8
commit c32e452db8
parent 24bd8b2e42
1 changed files with 4 additions and 0 deletions
--- a/deploy/concierge/rbac.yaml
+++ b/deploy/concierge/rbac.yaml
@ -24,6 +24,10 @@ rules:
  - apiGroups: [ policy ]
    resources: [ podsecuritypolicies ]
    verbs: [ use ]
+  - apiGroups: [ security.openshift.io ]
+    resources: [ securitycontextconstraints ]
+    verbs: [ use ]
+    resourceNames: [ nonroot ]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1