Skip to content

Commit 20540bc

Browse files
authored
Merge pull request #35034 from adellape/helm_scc
2 parents d144b3c + 598f677 commit 20540bc

File tree

2 files changed

+23
-1
lines changed

2 files changed

+23
-1
lines changed

modules/osdk-create-cr.adoc

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,16 @@ ifndef::helm[]
6060
endif::[]
6161
----
6262

63+
ifdef::helm[]
64+
. The {app-proper} service account requires privileged access to run in {product-title}. Add the following security context constraint (SCC) to the service account for the `{app}-sample` pod:
65+
+
66+
[source,terminal,subs="attributes+"]
67+
----
68+
$ oc adm policy add-scc-to-user \
69+
anyuid system:serviceaccount:{app}-operator-system:{app}-sample
70+
----
71+
endif::[]
72+
6373
. Create the CR:
6474
+
6575
[source,terminal,subs="attributes+"]

modules/osdk-quickstart.adoc

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ You can build and deploy a simple {type}-based Operator for {app-proper} by usin
3535

3636
. *Create a project.*
3737

38-
.. Create your project:
38+
.. Create your project directory:
3939
+
4040
[source,terminal,subs="attributes+"]
4141
----
@@ -143,6 +143,18 @@ $ make install
143143
$ make deploy IMG=<registry>/<user>/<image_name>:<tag>
144144
----
145145

146+
ifdef::helm[]
147+
. *Add a security context constraint (SCC).*
148+
+
149+
The {app-proper} service account requires privileged access to run in {product-title}. Add the following SCC to the service account for the `{app}-sample` pod:
150+
+
151+
[source,terminal,subs="attributes+"]
152+
----
153+
$ oc adm policy add-scc-to-user \
154+
anyuid system:serviceaccount:{app}-operator-system:{app}-sample
155+
----
156+
endif::[]
157+
146158
. *Create a sample custom resource (CR).*
147159

148160
.. Create a sample CR:

0 commit comments

Comments
 (0)