Skip to content

Commit e7d30ba

Browse files
authored
fix: update SCC (#97)
1 parent c086a29 commit e7d30ba

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

resources/scc.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ kind: SecurityContextConstraints
33
apiVersion: security.openshift.io/v1
44
metadata:
55
name: nginx-ingress-admin
6-
allowPrivilegedContainer: true
6+
allowPrivilegedContainer: false
77
runAsUser:
88
type: MustRunAs
99
uid: 101
@@ -19,10 +19,10 @@ allowHostPorts: false
1919
allowHostDirVolumePlugin: false
2020
allowHostIPC: false
2121
readOnlyRootFilesystem: false
22+
seccompProfiles:
23+
- runtime/default
2224
volumes:
2325
- secret
24-
defaultAddCapabilities:
25-
- "NET_BIND_SERVICE"
2626
requiredDropCapabilities:
2727
- ALL
2828
users:

0 commit comments

Comments
 (0)