From f34305f58aecacbbd4fe5cd46e6dbc85f2955bff Mon Sep 17 00:00:00 2001 From: kaitlynmichael Date: Wed, 18 Sep 2024 12:09:00 -0500 Subject: [PATCH 1/3] changed wording of SCC note --- .../deployment/openshift/openshift-operatorhub.md | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md index 9fb175e834..b3ea2e2514 100644 --- a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md +++ b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md @@ -29,7 +29,7 @@ To see which version of Redis Enterprise for Kubernetes supports your OpenShift Only one namespace per operator is supported. -4. Update the **channel** with the version you're installing. +4. Update the **channel** with the version you're installing. For more information about specific versions, see the [release notes]({{< relref "/operate/kubernetes/release-notes/" >}}). @@ -66,11 +66,15 @@ You only need to install the SCC once, but you must not delete it. After the install, the OperatorHub automatically uses the constraint for Redis Enterprise node pods. {{< note >}} -**Known Limitation** - The automatic use of the security constraint is limited. The -Redis Enterprise must be named `rec` for the constraint to be used automatically. **Use the cluster name `rec` when deploying with the OperatorHub.** +If you are using the recommended RedisEnterpriseCluster name of `rec`, the SCC is automatically bound to the RedisEnterpriseCluster after install. + +If you choose a different name for the RedisEnterpriseCluster, or override the default service account name, you must manually bind SCC to the RedisEnterpriseCluster’s service account: + + ```sh + oc adm policy add-scc-to-user redis-enterprise-scc-v2 \ + system:serviceaccount:: + ``` -If you require a different name, you must grant the SCC to the project -namespace. {{< /note >}} ## Create Redis Enterprise custom resources From c39be11c2b0591df6623e4e3128fd6284f9fb785 Mon Sep 17 00:00:00 2001 From: Kaitlyn Michael <76962844+kaitlynmichael@users.noreply.github.com> Date: Wed, 18 Sep 2024 14:04:01 -0500 Subject: [PATCH 2/3] Update content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md Co-authored-by: Zvi Cahana --- .../kubernetes/deployment/openshift/openshift-operatorhub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md index b3ea2e2514..9e261c74cc 100644 --- a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md +++ b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md @@ -68,7 +68,7 @@ After the install, the OperatorHub automatically uses the constraint for Redis E {{< note >}} If you are using the recommended RedisEnterpriseCluster name of `rec`, the SCC is automatically bound to the RedisEnterpriseCluster after install. -If you choose a different name for the RedisEnterpriseCluster, or override the default service account name, you must manually bind SCC to the RedisEnterpriseCluster’s service account: +If you choose a different name for the RedisEnterpriseCluster, or override the default service account name, you must manually bind the SCC to the RedisEnterpriseCluster’s service account: ```sh oc adm policy add-scc-to-user redis-enterprise-scc-v2 \ From b5c8240498ae723fb04a8c0014df956783598430 Mon Sep 17 00:00:00 2001 From: Kaitlyn Michael <76962844+kaitlynmichael@users.noreply.github.com> Date: Wed, 18 Sep 2024 14:04:55 -0500 Subject: [PATCH 3/3] Update content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md --- .../kubernetes/deployment/openshift/openshift-operatorhub.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md index 9e261c74cc..a555456efc 100644 --- a/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md +++ b/content/operate/kubernetes/deployment/openshift/openshift-operatorhub.md @@ -72,7 +72,7 @@ If you choose a different name for the RedisEnterpriseCluster, or override the d ```sh oc adm policy add-scc-to-user redis-enterprise-scc-v2 \ - system:serviceaccount:: + system:serviceaccount:: ``` {{< /note >}}