Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Customize the scc of deployments to make ocm run under different scc #633

Open
zhiweiyin318 opened this issue Sep 29, 2024 · 2 comments
Open
Labels
enhancement New feature or request

Comments

@zhiweiyin318
Copy link
Member

Describe the enhancement
currently the scc in the deployments can not be customized, the ocm may could not run under some restricted scc.
need an approach to solve ssc .

the related PRs :
#250
#252

@zhiweiyin318 zhiweiyin318 added the enhancement New feature or request label Sep 29, 2024
@tamalsaha
Copy link
Contributor

tamalsaha commented Sep 29, 2024

I was able to get things running under restricted security profile using the following chages.

By restricted profile, I mean pod-security.kubernetes.io/enforce: restricted label on namespaces.

namespaces=( \
  open-cluster-management \
  open-cluster-management-addon \
  open-cluster-management-agent \
  open-cluster-management-agent-addon \
  open-cluster-management-cluster-auth \
  open-cluster-management-cluster-proxy \
  open-cluster-management-hub \
)

for ns in ${namespaces[@]}; do
  kubectl create ns $ns
  kubectl label ns $ns pod-security.kubernetes.io/enforce=restricted
done

Copy link

This issue is stale because it has been open for 120 days with no activity. After 14 days of inactivity, it will be closed. Remove the stale label to prevent this issue from being closed.

@github-actions github-actions bot added the Stale label Jan 28, 2025
@qiujian16 qiujian16 removed the Stale label Feb 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: No status
Development

No branches or pull requests

3 participants