cscott/vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Vault SCC with priority 20
All checks were successful
continuous-integration/publish-helm Helm publish succeeded

Browse Source
This commit is contained in:
Conan Scott
2026-01-14 04:40:57 +00:00
parent 5fc083961a
commit 215857128a
1 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
templates/vault-scc.yaml Normal file
View File

@@ -0,0 +1,25 @@
kind: SecurityContextConstraints
apiVersion: security.openshift.io/v1
metadata:
name: vault-restricted
priority: 20
allowPrivilegedContainer: false
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
runAsUser:
type: MustRunAs
uid: 100
seLinuxContext:
type: MustRunAs
fsGroup:
type: MustRunAs
supplementalGroups:
type: RunAsAny
defaultAddCapabilities: []
requiredDropCapabilities:
- ALL
users: []
groups: []