cscott/okd-platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

made some naming errors. fixed

Browse Source
This commit is contained in:
Conan Scott
2026-01-13 10:06:35 +11:00
parent 9b3563ebfc
commit 8b65362c75
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
manifests/scc/scc-restricted-hostpath-privesc.yaml
View File

@@ -1,13 +1,13 @@
apiVersion: security.openshift.io/v1 apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints kind: SecurityContextConstraints
metadata: metadata:
name: restricted-hostpath-privesc name: restricted-hostpath-privesc # this scc allows hostPath and allowPrivilegeEscalation
allowHostDirVolumePlugin: true allowHostDirVolumePlugin: true
allowHostIPC: false allowHostIPC: false
allowHostNetwork: false allowHostNetwork: false
allowHostPID: false allowHostPID: false
allowHostPorts: false allowHostPorts: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: true
allowPrivilegedContainer: false allowPrivilegedContainer: false
allowedCapabilities: allowedCapabilities:
- CHOWN - CHOWN

4
manifests/scc/scc-restricted-hostpath.yaml
View File

@@ -2,12 +2,12 @@ apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints kind: SecurityContextConstraints
metadata: metadata:
name: restricted-hostpath name: restricted-hostpath
allowHostDirVolumePlugin: true # Needed for /dev/dri hostPath allowHostDirVolumePlugin: true #this scc allows hostPath
allowHostIPC: false allowHostIPC: false
allowHostNetwork: false allowHostNetwork: false
allowHostPID: false allowHostPID: false
allowHostPorts: false allowHostPorts: false
allowPrivilegeEscalation: true allowPrivilegeEscalation: false
allowPrivilegedContainer: false allowPrivilegedContainer: false
allowedCapabilities: allowedCapabilities:
- CHOWN - CHOWN