File tree Expand file tree Collapse file tree 1 file changed +1
-47
lines changed
deploy/helm/spark-k8s-operator/templates Expand file tree Collapse file tree 1 file changed +1
-47
lines changed Original file line number Diff line number Diff line change 1
- {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
2
- ---
3
- apiVersion : security.openshift.io/v1
4
- kind : SecurityContextConstraints
5
- metadata :
6
- name : spark-k8s-scc
7
- labels :
8
- {{- include "operator.labels" . | nindent 4 }}
9
- annotations :
10
- kubernetes.io/description : |-
11
- This resource is derived from hostmount-anyuid. It provides all the features of the
12
- restricted SCC but allows host mounts and any UID by a pod. This is primarily
13
- used by the persistent volume recycler. WARNING: this SCC allows host file
14
- system access as any UID, including UID 0. Grant with caution.
15
- release.openshift.io/create-only : " true"
16
- allowHostDirVolumePlugin : true
17
- allowHostIPC : false
18
- allowHostNetwork : false
19
- allowHostPID : false
20
- allowHostPorts : false
21
- allowPrivilegeEscalation : true
22
- allowPrivilegedContainer : false
23
- allowedCapabilities : null
24
- defaultAddCapabilities : null
25
- fsGroup :
26
- type : RunAsAny
27
- groups : []
28
- priority : null
29
- readOnlyRootFilesystem : false
30
- runAsUser :
31
- type : RunAsAny
32
- seLinuxContext :
33
- type : MustRunAs
34
- supplementalGroups :
35
- type : RunAsAny
36
- volumes :
37
- - configMap
38
- - downwardAPI
39
- - emptyDir
40
- - hostPath
41
- - nfs
42
- - persistentVolumeClaim
43
- - projected
44
- - secret
45
- - ephemeral
46
- {{ end }}
47
1
---
48
2
apiVersion : rbac.authorization.k8s.io/v1
49
3
kind : ClusterRole
82
36
resources :
83
37
- securitycontextconstraints
84
38
resourceNames :
85
- - spark-k8s-scc
39
+ - nonroot-v2
86
40
verbs :
87
41
- use
88
42
{{ end }}
You can’t perform that action at this time.
0 commit comments