Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Customize the scc of deployments to make ocm run under different scc #633

Open
zhiweiyin318 opened this issue Sep 29, 2024 · 1 comment
Open
Labels
enhancement New feature or request

Comments

@zhiweiyin318
Copy link
Member

Describe the enhancement
currently the scc in the deployments can not be customized, the ocm may could not run under some restricted scc.
need an approach to solve ssc .

the related PRs :
#250
#252

@zhiweiyin318 zhiweiyin318 added the enhancement New feature or request label Sep 29, 2024
@tamalsaha
Copy link
Contributor

tamalsaha commented Sep 29, 2024

I was able to get things running under restricted security profile using the following chages.

By restricted profile, I mean pod-security.kubernetes.io/enforce: restricted label on namespaces.

namespaces=( \
  open-cluster-management \
  open-cluster-management-addon \
  open-cluster-management-agent \
  open-cluster-management-agent-addon \
  open-cluster-management-cluster-auth \
  open-cluster-management-cluster-proxy \
  open-cluster-management-hub \
)

for ns in ${namespaces[@]}; do
  kubectl create ns $ns
  kubectl label ns $ns pod-security.kubernetes.io/enforce=restricted
done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: No status
Development

No branches or pull requests

2 participants