Skip to content

Commit c210b13

Browse files
jianzhangbjzci-robot
authored andcommitted
UPSTREAM: <carry>: SELinux type for operator-controller
Signed-off-by: Jian Zhang <[email protected]>
1 parent dea5c1d commit c210b13

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

openshift/operator-controller/kustomize/overlays/openshift/olmv1-ns/patches/manager_deployment_certs.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,3 +22,6 @@
2222
- op: add
2323
path: /spec/template/spec/containers/0/env
2424
value: [{"name":"SSL_CERT_DIR", "value":"/var/ca-certs"}]
25+
- op: add
26+
path: /spec/template/spec/securityContext/seLinuxOptions
27+
value: {"type":"spc_t"}

openshift/operator-controller/manifests/20-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,8 @@ spec:
100100
node-role.kubernetes.io/master: ""
101101
securityContext:
102102
runAsNonRoot: true
103+
seLinuxOptions:
104+
type: spc_t
103105
seccompProfile:
104106
type: RuntimeDefault
105107
serviceAccountName: operator-controller-controller-manager

0 commit comments

Comments
 (0)