helmfiles/resources/report-portal-third-party-resources-scc.yaml (48 lines of code) (raw):
apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints
metadata:
annotations:
"helm.sh/hook": "pre-install"
name: report-portal-minio-rabbitmq-postgresql
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
allowPrivilegeEscalation: true
allowPrivilegedContainer: false
allowedCapabilities: null
allowedFlexVolumes: []
defaultAddCapabilities: []
fsGroup:
type: MustRunAs
ranges:
- min: 999
max: 65543
groups: []
priority: 1
readOnlyRootFilesystem: false
requiredDropCapabilities:
- KILL
- MKNOD
- SETUID
- SETGID
runAsUser:
type: MustRunAsRange
uidRangeMin: 1
uidRangeMax: 65543
seLinuxContext:
type: MustRunAs
supplementalGroups:
type: RunAsAny
users:
- system:serviceaccount:report-portal:minio
- system:serviceaccount:report-portal:rabbitmq
- system:serviceaccount:report-portal:postgresql
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret