Skip to content

Commit 9234fa9

Browse files
ChristianZaccariaastefanutti
authored andcommitted
PATCH: Add SecurityContext to ray pods to function with restricted pod-security
1 parent 7bc7505 commit 9234fa9

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

ray-operator/config/openshift/ray_operator_scc.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,12 @@ metadata:
44
name: run-as-ray-user
55
seLinuxContext:
66
type: MustRunAs
7+
defaultAllowPrivilegeEscalation: false
8+
allowPrivilegeEscalation: false
9+
seccompProfiles:
10+
- runtime/default
11+
requiredDropCapabilities:
12+
- ALL
713
runAsUser:
814
type: MustRunAs
915
uid: 1000

0 commit comments

Comments
 (0)