Attachment 1766059 Details for Bug 1942744 – collector-scc.yaml

collector-scc.yaml

collector-scc.yaml (text/plain), 1.28 KB, created by Robert Bohne on 2021-03-24 20:15:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Robert Bohne

Created: 2021-03-24 20:15:08 UTC

Size: 1.28 KB

patch

obsolete

>
>
>
>
>
>
>
>
>apiVersion: security.openshift.io/v1
>kind: SecurityContextConstraints
>metadata:
>  name: collector
>  labels:
>    app.kubernetes.io/instance: stackrox-secured-cluster-services
>    app.kubernetes.io/managed-by: Helm
>    app.kubernetes.io/name: stackrox
>    app.kubernetes.io/part-of: stackrox-secured-cluster-services
>    app.kubernetes.io/version: 3.0.56.1
>    helm.sh/chart: sensor-56.1.0
>    auto-upgrade.stackrox.io/component: "sensor"
>  annotations:
>    email: support@stackrox.com
>    meta.helm.sh/release-name: stackrox-secured-cluster-services
>    meta.helm.sh/release-namespace: stackrox
>    owner: stackrox
>    kubernetes.io/description: This SCC is based on privileged, hostaccess, and hostmount-anyuid
>users:
>  - system:serviceaccount:stackrox:collector
>allowHostDirVolumePlugin: true
>allowPrivilegedContainer: true
>fsGroup:
>  type: RunAsAny
>groups: []
>priority: 0
>readOnlyRootFilesystem: true
>runAsUser:
>  type: RunAsAny
>seLinuxContext:
>  type: RunAsAny
>seccompProfiles:
>  - '*'
>supplementalGroups:
>  type: RunAsAny
>allowHostIPC: false
>allowHostNetwork: false
>allowHostPID: false
>allowHostPorts: false
>allowPrivilegeEscalation: true
>allowedCapabilities: []
>defaultAddCapabilities: []
>requiredDropCapabilities: []
>volumes:
>  - configMap
>  - downwardAPI
>  - emptyDir
>  - hostPath
>  - secret

Actions: View

Attachments on bug 1942744: 1766059