Files
vault/templates/scc.yaml
Conan Scott e6e1970ca1
All checks were successful
continuous-integration/publish-helm Helm publish succeeded
Add restricted SCC for Vault
2026-01-14 04:24:08 +00:00

25 lines
473 B
YAML

kind: SecurityContextConstraints
apiVersion: security.openshift.io/v1
metadata:
name: vault-restricted
allowPrivilegedContainer: false
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
runAsUser:
type: MustRunAs
uid: 100
seLinuxContext:
type: MustRunAs
fsGroup:
type: MustRunAs
supplementalGroups:
type: RunAsAny
defaultAddCapabilities: []
requiredDropCapabilities:
- ALL
users: []
groups: []