Skip to content

Instantly share code, notes, and snippets.

@icheko

icheko/medium-podman-scc.yaml

Created September 14, 2022 04:17
Download ZIP

Revisions

  1. icheko created this gist Sep 14, 2022.
    36 changes: 36 additions & 0 deletions medium-podman-scc.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,36 @@
    apiVersion: security.openshift.io/v1
    metadata:
    name: nonrootbuilder
    allowHostDirVolumePlugin: false
    allowHostIPC: false
    allowHostNetwork: false
    allowHostPID: false
    allowHostPorts: false
    allowPrivilegeEscalation: true
    allowPrivilegedContainer: false
    allowedCapabilities: null
    defaultAddCapabilities: null
    groups: []
    kind: SecurityContextConstraints
    priority: 5
    readOnlyRootFilesystem: false
    requiredDropCapabilities:
    - KILL
    - MKNOD
    fsGroup:
    type: RunAsAny
    runAsUser:
    type: MustRunAs
    uid: 1001
    seLinuxContext:
    type: MustRunAs
    supplementalGroups:
    type: RunAsAny
    users: []
    volumes:
    - configMap
    - downwardAPI
    - emptyDir
    - persistentVolumeClaim
    - projected
    - secret