Skip to content

Commit ee3e663

Browse files
author
Michael Peter
committed
OCPBUGS-18836: Add SCC flag and PSA references to OSDK CLI ref
1 parent c842ae8 commit ee3e663

File tree

4 files changed

+32
-0
lines changed

4 files changed

+32
-0
lines changed

modules/osdk-cli-ref-run-bundle-upgrade.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,14 @@ The `run bundle-upgrade` subcommand upgrades an Operator that was previously ins
2323
|`-n`, `--namespace` (string)
2424
|If present, namespace in which to run the CLI request.
2525

26+
|`--security-context-config <security_context>`
27+
|Specifies the security context to use for the catalog pod. Allowed values include `restricted` and `legacy`. The default value is `legacy`. ^[1]^
28+
2629
|`-h`, `--help`
2730
|Help output for the `run bundle` subcommand.
2831

2932
|===
33+
[.small]
34+
--
35+
1. The `restricted` security context is not compatible with the `default` namespace. To configure your Operator's pod security admission in your production environment, see "Complying with pod security admission". For more information about pod security admission, see "Understanding and managing pod security admission".
36+
--

modules/osdk-cli-ref-run-bundle.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,14 @@ The `run bundle` subcommand deploys an Operator in the bundle format with Operat
2929
|`-n`, `--namespace` (string)
3030
|If present, namespace in which to run the CLI request.
3131

32+
|`--security-context-config <security_context>`
33+
|Specifies the security context to use for the catalog pod. Allowed values include `restricted` and `legacy`. The default value is `legacy`. ^[1]^
34+
3235
|`-h`, `--help`
3336
|Help output for the `run bundle` subcommand.
3437

3538
|===
39+
[.small]
40+
--
41+
1. The `restricted` security context is not compatible with the `default` namespace. To configure your Operator's pod security admission in your production environment, see "Complying with pod security admission". For more information about pod security admission, see "Understanding and managing pod security admission".
42+
--

modules/osdk-cli-ref-scorecard.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,9 @@ The `operator-sdk scorecard` command runs the scorecard tool to validate an Oper
3131
|`-o`, `--output` (string)
3232
|Output format for results. Available values are `text`, which is the default, and `json`.
3333

34+
|`--pod-security <security_context>`
35+
|Option to run scorecard with the specified security context. Allowed values include `restricted` and `legacy`. The default value is `legacy`. ^[1]^
36+
3437
|`-l`, `--selector` (string)
3538
|Label selector to determine which tests are run.
3639

@@ -44,3 +47,7 @@ The `operator-sdk scorecard` command runs the scorecard tool to validate an Oper
4447
|Seconds to wait for tests to complete, for example `35s`. The default value is `30s`.
4548

4649
|===
50+
[.small]
51+
--
52+
1. The `restricted` security context is not compatible with the `default` namespace. To configure your Operator's pod security admission in your production environment, see "Complying with pod security admission". For more information about pod security admission, see "Understanding and managing pod security admission".
53+
--

operators/operator_sdk/osdk-cli-ref.adoc

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,22 @@ include::modules/osdk-cli-ref-run-bundle.adoc[leveloffset=+2]
3838
.Additional resources
3939

4040
* See xref:../../operators/understanding/olm/olm-understanding-operatorgroups.adoc#olm-operatorgroups-membership_olm-understanding-operatorgroups[Operator group membership] for details on possible install modes.
41+
* xref:../../operators/operator_sdk/osdk-complying-with-psa.adoc#osdk-complying-with-psa[Complying with pod security admission]
42+
* xref:../../authentication/understanding-and-managing-pod-security-admission.adoc#understanding-and-managing-pod-security-admission[Understanding and managing pod security admission]
4143
4244
include::modules/osdk-cli-ref-run-bundle-upgrade.adoc[leveloffset=+2]
45+
46+
[role="_additional-resources"]
47+
.Additional resources
48+
49+
* xref:../../operators/operator_sdk/osdk-complying-with-psa.adoc#osdk-complying-with-psa[Complying with pod security admission]
50+
* xref:../../authentication/understanding-and-managing-pod-security-admission.adoc#understanding-and-managing-pod-security-admission[Understanding and managing pod security admission]
51+
4352
include::modules/osdk-cli-ref-scorecard.adoc[leveloffset=+1]
4453

4554
[role="_additional-resources"]
4655
.Additional resources
4756

4857
* See xref:../../operators/operator_sdk/osdk-scorecard.adoc#osdk-scorecard[Validating Operators using the scorecard tool] for details about running the scorecard tool.
58+
* xref:../../operators/operator_sdk/osdk-complying-with-psa.adoc#osdk-complying-with-psa[Complying with pod security admission]
59+
* xref:../../authentication/understanding-and-managing-pod-security-admission.adoc#understanding-and-managing-pod-security-admission[Understanding and managing pod security admission]

0 commit comments

Comments
 (0)