Merge pull request #235 from liouk/required-scc

AUTH-482: set required-scc for openshift workloads
openshift · Mar 13, 2024 · cb3093f · cb3093f
2 parents f409fb9 + 59b7205
commit cb3093f
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/bindata/v4.0.0/controller/deployment.yaml b/bindata/v4.0.0/controller/deployment.yaml
@@ -18,6 +18,7 @@ spec:
       name: service-ca
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: restricted-v2
       labels:
         app: service-ca
         service-ca: "true"

diff --git a/manifests/05_deploy-ibm-cloud-managed.yaml b/manifests/05_deploy-ibm-cloud-managed.yaml
@@ -16,6 +16,7 @@ spec:
   template:
     metadata:
       annotations:
+        openshift.io/required-scc: nonroot-v2
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
       labels:
         app: service-ca-operator

diff --git a/manifests/05_deploy.yaml b/manifests/05_deploy.yaml
@@ -18,6 +18,7 @@ spec:
       name: service-ca-operator
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: nonroot-v2
       labels:
         app: service-ca-operator
     spec:

diff --git a/pkg/operator/v4_00_assets/bindata.go b/pkg/operator/v4_00_assets/bindata.go