Skip to content

Commit 0bfe629

Browse files
authored
Merge pull request #33416 from kalexand-rh/BZ1881856
BZ1881856: why you shouldn't modify the default SCCs
2 parents 17b415c + 16b487d commit 0bfe629

File tree

2 files changed

+2
-4
lines changed

2 files changed

+2
-4
lines changed

modules/security-context-constraints-about.adoc

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,8 +53,7 @@ effectively root on the cluster and must be trusted accordingly.
5353

5454
[IMPORTANT]
5555
====
56-
Do not modify the default SCCs. Customizing the default SCCs can lead to issues
57-
when {product-title} is upgraded.
56+
Do not modify the default SCCs. Customizing the default SCCs can lead to issues when some of the platform pods deploy or {product-title} is upgraded. During upgrades between some versions of {product-title}, the values of the default SCCs are reset to the default values, which discards all customizations to those SCCs.
5857
ifdef::openshift-origin,openshift-enterprise,openshift-webscale[]
5958
Instead, create new SCCs.
6059
endif::[]

modules/security-context-constraints-command-reference.adoc

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,8 +15,7 @@ You must have `cluster-admin` privileges to manage SCCs.
1515

1616
[IMPORTANT]
1717
====
18-
Do not modify the default SCCs. Customizing the default SCCs can lead to issues
19-
when upgrading. Instead, create new SCCs.
18+
Do not modify the default SCCs. Customizing the default SCCs can lead to issues when some of the platform pods deploy or {product-title} is upgraded. During upgrades between some versions of {product-title}, the values of the default SCCs are reset to the default values, which discards all customizations to those SCCs.
2019
====
2120
endif::openshift-enterprise,openshift-webscale,openshift-origin[]
2221

0 commit comments

Comments
 (0)