Skip to content

Commit 6a66965

Browse files
authored
Add missing service accounts and etcd metadata capability to OpenShift SCC (#292)
* Add missing service accounts to OpenShift SCC Signed-off-by: Dom Del Nano <[email protected]> * Add NET_RAW capability to allow etcd metadatastore to work Signed-off-by: Dom Del Nano <[email protected]> --------- Signed-off-by: Dom Del Nano <[email protected]>
1 parent 8c26016 commit 6a66965

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

content/en/05-reference/01-admin/04-environment-configs.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,7 @@ seccompProfiles:
4040
allowedCapabilities:
4141
- SYS_ADMIN
4242
- SYS_PTRACE
43+
- NET_RAW
4344
allowHostNetwork: true
4445
allowHostDirVolumePlugin: true
4546
runAsUser:
@@ -48,9 +49,11 @@ seLinuxContext:
4849
type: RunAsAny
4950
users:
5051
- system:serviceaccount:pl:default
51-
- system:serviceaccount:pl:query-broker-service-account
52-
- system:serviceaccount:pl:pl-cert-provisioner-service-account
5352
- system:serviceaccount:pl:cloud-conn-service-account
53+
- system:serviceaccount:pl:metadata-service-account
54+
- system:serviceaccount:pl:pl-cert-provisioner-service-account
55+
- system:serviceaccount:pl:pl-updater-service-account
56+
- system:serviceaccount:pl:query-broker-service-account
5457

5558
```
5659

0 commit comments

Comments
 (0)