helmfiles/resources/report-portal-elasticsearch-scc.yaml (41 lines of code) (raw):
apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints
metadata:
annotations:
"helm.sh/hook": "pre-install"
name: report-portal-elasticsearch
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
allowPrivilegedContainer: true
allowedCapabilities: []
allowedFlexVolumes: []
defaultAddCapabilities: []
fsGroup:
type: MustRunAs
ranges:
- max: 1000
min: 1000
groups: []
priority: 0
readOnlyRootFilesystem: false
requiredDropCapabilities: []
runAsUser:
type: MustRunAsRange
uidRangeMax: 1000
uidRangeMin: 0
seLinuxContext:
type: MustRunAs
supplementalGroups:
type: RunAsAny
users:
- system:serviceaccount:report-portal:elasticsearch-master
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret