infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

coreos-ci: rename anyuid-setfcap SCC

Browse source 
SCCs are cluster-scoped, but here we just want an SCC uniquely for use
by the `coreos-ci` project. So prefix the SCC name with that.

This may have been the root of an issue where we had this SCC defined
mulitple times (once here and once in the `fedora-coreos-pipeline` role)
and any users added were lost because it was being redefined.

The one in `fedora-coreos-pipeline` has since been nuked:
https://pagure.io/fedora-infra/ansible/pull-request/989
This commit is contained in:
Jonathan Lebon 2022-03-04 16:53:37 -05:00
parent b922910edb
commit fdc89d848b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/openshift-apps/coreos-ci/templates/securitycontextconstraints.yaml
View file

@ -17,7 +17,7 @@ kind: SecurityContextConstraints
metadata:
annotations:
kubernetes.io/description: custom scc for anyuid + CAP_SETFCAP defaultAddCapability
name: anyuid-setfcap
name: coreos-ci-anyuid-setfcap
priority: 10
readOnlyRootFilesystem: false
requiredDropCapabilities: