Skip to content

Commit c904b28

Browse files
jianzhangbjzopenshift-cherrypick-robot
authored andcommitted
UPSTREAM: <carry>: set the SElinux type
Signed-off-by: Jian Zhang <[email protected]>
1 parent 000dd09 commit c904b28

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

openshift/kustomize/overlays/openshift/olmv1-ns/patches/manager_deployment_certs.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,3 +10,6 @@
1010
- op: add
1111
path: /spec/template/spec/containers/0/env
1212
value: [{"name":"SSL_CERT_DIR", "value":"/var/ca-certs"}]
13+
- op: add
14+
path: /spec/template/spec/securityContext/seLinuxOptions
15+
value: {"type":"spc_t"}

openshift/manifests/20-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,6 +115,8 @@ spec:
115115
node-role.kubernetes.io/master: ""
116116
securityContext:
117117
runAsNonRoot: true
118+
seLinuxOptions:
119+
type: spc_t
118120
seccompProfile:
119121
type: RuntimeDefault
120122
serviceAccountName: operator-controller-controller-manager

0 commit comments

Comments
 (0)