Merge pull request #336 from liouk/required-scc

AUTH-482: set required-scc for openshift workloads
openshift · May 7, 2024 · e620f4a · e620f4a
2 parents d291c51 + b68b048
commit e620f4a
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/bindata/assets/openshift-controller-manager/deploy.yaml b/bindata/assets/openshift-controller-manager/deploy.yaml
@@ -33,6 +33,7 @@ spec:
       name: openshift-controller-manager
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: restricted-v2
       labels:
         app: openshift-controller-manager-a
         controller-manager: "true"

diff --git a/bindata/assets/openshift-controller-manager/route-controller-manager-deploy.yaml b/bindata/assets/openshift-controller-manager/route-controller-manager-deploy.yaml
@@ -23,6 +23,7 @@ spec:
       name: route-controller-manager
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: restricted-v2
       labels:
         app: route-controller-manager
         route-controller-manager: "true"

diff --git a/manifests/09_deployment.yaml b/manifests/09_deployment.yaml
@@ -19,6 +19,7 @@ spec:
       name: openshift-controller-manager-operator
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: nonroot-v2
       labels:
         app: openshift-controller-manager-operator
     spec: