Add RoleBinding for calibre anyuid SCC
- Bind calibre-sa to anyuid SecurityContextConstraints - Enables secure non-root execution for LinuxServer containers - Maintains production security while ensuring container compatibility - Fixes supplementary group issues with s6-overlay
This commit is contained in:
18
manifests/rolebinding.yaml
Normal file
18
manifests/rolebinding.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: calibre-anyuid-working
|
||||||
|
namespace: calibre
|
||||||
|
labels:
|
||||||
|
app: calibre
|
||||||
|
app.kubernetes.io/instance: calibre
|
||||||
|
type: third-party
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: calibre-sa
|
||||||
|
namespace: calibre
|
||||||
|
roleRef:
|
||||||
|
kind: ClusterRole
|
||||||
|
name: anyuid-scc-user
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
Reference in New Issue
Block a user