Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

mirrormanager: for now, just try and using the anyuid ssc

Browse source 
This is a bit more broad than we want, we only want to have:

  Supplemental Groups Strategy: RunAsAny
    Ranges:                                     <none>

but as a quick fix it should be ok I hope.
It does provide that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-10-26 12:13:37 -07:00
parent 469dbff21b
commit 3437236664
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/openshift-apps/mirrormanager/templates/deploymentconfig.yml
View file

@ -22,6 +22,8 @@ spec:
updatePeriodSeconds: 1 updatePeriodSeconds: 1
template: template:
metadata: metadata:
annotations:
openshift.io/required-scc: "anyuid"
creationTimestamp: null creationTimestamp: null
labels: labels:
app: mirrormanager app: mirrormanager