Skip to content

Commit 80df389

Browse files
committed
UPSTREAM: <carry>: SELinux type for operator-controller
Signed-off-by: Jian Zhang <[email protected]>
1 parent 0f6e9d9 commit 80df389

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

openshift/operator-controller/kustomize/overlays/openshift/olmv1-ns/patches/manager_deployment_certs.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,3 +22,6 @@
2222
- op: add
2323
path: /spec/template/spec/containers/0/env
2424
value: [{"name":"SSL_CERT_DIR", "value":"/var/ca-certs"}]
25+
- op: add
26+
path: /spec/template/spec/securityContext/seLinuxOptions
27+
value: {"type":"spc_t"}

openshift/operator-controller/manifests/20-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,8 @@ spec:
9797
node-role.kubernetes.io/master: ""
9898
securityContext:
9999
runAsNonRoot: true
100+
seLinuxOptions:
101+
type: spc_t
100102
seccompProfile:
101103
type: RuntimeDefault
102104
serviceAccountName: operator-controller-controller-manager

0 commit comments

Comments
 (0)