Skip to content

Commit d209907

Browse files
lioukkramaranya
authored andcommitted
set required-scc for openshift workloads
1 parent f3f8de5 commit d209907

19 files changed

+29
-6
lines changed

manifests/0000_50_olm_06-psm-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ spec:
1919
metadata:
2020
annotations:
2121
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
22+
openshift.io/required-scc: restricted-v2
2223
labels:
2324
app: package-server-manager
2425
spec:

manifests/0000_50_olm_06-psm-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ spec:
1919
metadata:
2020
annotations:
2121
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
22+
openshift.io/required-scc: restricted-v2
2223
labels:
2324
app: package-server-manager
2425
spec:

manifests/0000_50_olm_07-collect-profiles.cronjob.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ spec:
1616
metadata:
1717
annotations:
1818
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
19+
openshift.io/required-scc: restricted-v2
1920
spec:
2021
securityContext:
2122
runAsNonRoot: true

manifests/0000_50_olm_07-olm-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: olm-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

manifests/0000_50_olm_07-olm-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: olm-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

manifests/0000_50_olm_08-catalog-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: catalog-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

manifests/0000_50_olm_08-catalog-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: catalog-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

microshift-manifests/0000_50_olm_06-psm-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ spec:
1919
metadata:
2020
annotations:
2121
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
22+
openshift.io/required-scc: restricted-v2
2223
labels:
2324
app: package-server-manager
2425
spec:

microshift-manifests/0000_50_olm_06-psm-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ spec:
1919
metadata:
2020
annotations:
2121
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
22+
openshift.io/required-scc: restricted-v2
2223
labels:
2324
app: package-server-manager
2425
spec:

microshift-manifests/0000_50_olm_07-collect-profiles.cronjob.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ spec:
1616
metadata:
1717
annotations:
1818
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
19+
openshift.io/required-scc: restricted-v2
1920
spec:
2021
securityContext:
2122
runAsNonRoot: true

microshift-manifests/0000_50_olm_07-olm-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: olm-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

microshift-manifests/0000_50_olm_07-olm-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: olm-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

microshift-manifests/0000_50_olm_08-catalog-operator.deployment.ibm-cloud-managed.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: catalog-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

microshift-manifests/0000_50_olm_08-catalog-operator.deployment.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ spec:
2121
app: catalog-operator
2222
annotations:
2323
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
24+
openshift.io/required-scc: restricted-v2
2425
spec:
2526
securityContext:
2627
runAsNonRoot: true

pkg/manifests/csv.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,7 @@ spec:
8686
app: packageserver
8787
annotations:
8888
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
89+
openshift.io/required-scc: restricted-v2
8990
creationTimestamp: null
9091
spec:
9192
securityContext:

scripts/catalog-deployment.patch.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
- command: update
2-
path: spec.template.metadata.annotations."target.workload.openshift.io/management"
3-
value: '{"effect": "PreferredDuringScheduling"}'
2+
path: spec.template.metadata.annotations
3+
value:
4+
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
5+
openshift.io/required-scc: restricted-v2
46
- command: update
57
path: spec.template.spec.priorityClassName
68
value: system-cluster-critical

scripts/generate_crds_manifests.sh

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -134,6 +134,7 @@ spec:
134134
metadata:
135135
annotations:
136136
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
137+
openshift.io/required-scc: restricted-v2
137138
labels:
138139
app: package-server-manager
139140
spec:
@@ -373,6 +374,7 @@ spec:
373374
metadata:
374375
annotations:
375376
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
377+
openshift.io/required-scc: restricted-v2
376378
spec:
377379
securityContext:
378380
runAsNonRoot: true

scripts/olm-deployment.patch.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
- command: update
2-
path: spec.template.metadata.annotations."target.workload.openshift.io/management"
3-
value: '{"effect": "PreferredDuringScheduling"}'
2+
path: spec.template.metadata.annotations
3+
value:
4+
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
5+
openshift.io/required-scc: restricted-v2
46
- command: update
57
path: spec.template.spec.priorityClassName
68
value: system-cluster-critical

scripts/packageserver-deployment.patch.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
- command: update
2-
path: spec.install.spec.deployments[0].spec.template.metadata.annotations."target.workload.openshift.io/management"
3-
value: '{"effect": "PreferredDuringScheduling"}'
2+
path: spec.install.spec.deployments[0].spec.template.metadata.annotations
3+
value:
4+
target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
5+
openshift.io/required-scc: restricted-v2
46
- command: update
57
path: spec.install.spec.deployments[0].spec.template.spec.priorityClassName
68
value: system-cluster-critical

0 commit comments

Comments
 (0)