Skip to content

Commit 48a1e92

Browse files
Merge pull request #509 from openshift-cherrypick-robot/cherry-pick-329-to-release-4.18
[release-4.18] OCPBUGS-62872: set the SElinux type
2 parents 000dd09 + c904b28 commit 48a1e92

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

openshift/kustomize/overlays/openshift/olmv1-ns/patches/manager_deployment_certs.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,3 +10,6 @@
1010
- op: add
1111
path: /spec/template/spec/containers/0/env
1212
value: [{"name":"SSL_CERT_DIR", "value":"/var/ca-certs"}]
13+
- op: add
14+
path: /spec/template/spec/securityContext/seLinuxOptions
15+
value: {"type":"spc_t"}

openshift/manifests/20-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,6 +115,8 @@ spec:
115115
node-role.kubernetes.io/master: ""
116116
securityContext:
117117
runAsNonRoot: true
118+
seLinuxOptions:
119+
type: spc_t
118120
seccompProfile:
119121
type: RuntimeDefault
120122
serviceAccountName: operator-controller-controller-manager

0 commit comments

Comments
 (0)