Add restricted SCC for Vault

2026-01-14 04:24:08 +00:00
parent a7d56dea82
commit e6e1970ca1
1 changed files with 24 additions and 0 deletions
--- a/templates/scc.yaml
+++ b/templates/scc.yaml
@@ -0,0 +1,24 @@
+kind: SecurityContextConstraints
+apiVersion: security.openshift.io/v1
+metadata:
+  name: vault-restricted
+allowPrivilegedContainer: false
+allowHostDirVolumePlugin: false
+allowHostIPC: false
+allowHostNetwork: false
+allowHostPID: false
+allowHostPorts: false
+runAsUser:
+  type: MustRunAs
+  uid: 100
+seLinuxContext:
+  type: MustRunAs
+fsGroup:
+  type: MustRunAs
+supplementalGroups:
+  type: RunAsAny
+defaultAddCapabilities: []
+requiredDropCapabilities:
+- ALL
+users: []
+groups: []