helmfiles/resources/report-portal-third-party-resources-scc.yaml (48 lines of code) (raw):

apiVersion: security.openshift.io/v1 kind: SecurityContextConstraints metadata: annotations: "helm.sh/hook": "pre-install" name: report-portal-minio-rabbitmq-postgresql allowHostDirVolumePlugin: false allowHostIPC: false allowHostNetwork: false allowHostPID: false allowHostPorts: false allowPrivilegeEscalation: true allowPrivilegedContainer: false allowedCapabilities: null allowedFlexVolumes: [] defaultAddCapabilities: [] fsGroup: type: MustRunAs ranges: - min: 999 max: 65543 groups: [] priority: 1 readOnlyRootFilesystem: false requiredDropCapabilities: - KILL - MKNOD - SETUID - SETGID runAsUser: type: MustRunAsRange uidRangeMin: 1 uidRangeMax: 65543 seLinuxContext: type: MustRunAs supplementalGroups: type: RunAsAny users: - system:serviceaccount:report-portal:minio - system:serviceaccount:report-portal:rabbitmq - system:serviceaccount:report-portal:postgresql volumes: - configMap - downwardAPI - emptyDir - persistentVolumeClaim - projected - secret