collabora-scc.yaml
No OneTemporary
Actions

Authored By

Unknown

Size

760 B

Referenced Files

None

Subscribers

None

collabora-scc.yaml
View Options

	{{- if and .Values.openshift .Values.collabora.enabled -}}
	apiVersion: security.openshift.io/v1
	kind: SecurityContextConstraints
	metadata:
	name: collabora-scc
	labels:
	app: "collabora-scc"
	allowHostDirVolumePlugin: false
	allowHostIPC: false
	allowHostNetwork: false
	allowHostPID: false
	allowHostPorts: false
	allowPrivilegeEscalation: true
	allowPrivilegedContainer: false
	allowedCapabilities:
	- CHOWN
	- FOWNER
	- SYS_CHROOT
	- MKNOD
	- SYS_ADMIN
	defaultAddCapabilities: null
	fsGroup:
	type: MustRunAs
	readOnlyRootFilesystem: false
	requiredDropCapabilities: []
	runAsUser:
	type: MustRunAsNonRoot
	seLinuxContext:
	type: RunAsAny
	supplementalGroups:
	type: RunAsAny
	volumes:
	- configMap
	- downwardAPI
	- persistentVolumeClaim
	- projected
	- secret
	{{- end }}