Skip to content

Commit f5a143a

Browse files
Merge pull request #291 from tchap/rollback-userns-operand
OCPBUGS-65713,CNTRLPLANE-1544: Revert "controller deployment: Use user namespace"
2 parents f090126 + 2f676c9 commit f5a143a

File tree

2 files changed

+6
-4
lines changed

2 files changed

+6
-4
lines changed

bindata/v4.0.0/controller/deployment.yaml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,20 +18,21 @@ spec:
1818
name: service-ca
1919
annotations:
2020
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
21-
openshift.io/required-scc: restricted-v3
21+
openshift.io/required-scc: restricted-v2
2222
labels:
2323
app: service-ca
2424
service-ca: "true"
2525
spec:
2626
serviceAccountName: service-ca
27-
hostUsers: false
2827
containers:
2928
- name: service-ca-controller
3029
image: ${IMAGE}
3130
imagePullPolicy: IfNotPresent
3231
command: ["service-ca-operator", "controller"]
3332
ports:
3433
- containerPort: 8443
34+
securityContext:
35+
runAsNonRoot: true
3536
resources:
3637
requests:
3738
memory: 120Mi

pkg/operator/v4_00_assets/bindata.go

Lines changed: 3 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)