/
githubmirror
/
charts
Обзор
Документация
Войти
/
githubmirror
/
charts
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
stable/sysdig/templates/securitycontextconstraint.yaml
42 строки
989 B
Néstor Salceda
[stable/sysdig] Use app.kubernetes.io labels instead of custom ones (#22022)
20 апр 2020, 17:07
Не верифицирован
20 апр 2020, 17:07
b5bd582
Код
Авторство
О чём код?
{{- if .Values.scc.create }} apiVersion: security.openshift.io/v1 kind: SecurityContextConstraints metadata: annotations: kubernetes.io/description: | This provides the minimum requirements to the Sysdig agent to run in the Openshift. name: {{ template "sysdig.fullname" . }} labels: {{ include "sysdig.labels" . | indent 4 }} allowHostDirVolumePlugin: true allowHostIPC: false allowHostNetwork: true allowHostPID: true allowHostPorts: false allowPrivilegeEscalation: true allowPrivilegedContainer: true allowedCapabilities: [] allowedUnsafeSysctls: [] defaultAddCapabilities: [] fsGroup: type: RunAsAny groups: [] priority: 0 readOnlyRootFilesystem: false requiredDropCapabilities: [] runAsUser: type: RunAsAny seLinuxContext: type: RunAsAny seccompProfiles: - '*' supplementalGroups: type: RunAsAny users: - system:serviceaccount:{{ .Release.Namespace }}:{{ template "sysdig.serviceAccountName" .}} volumes: - hostPath - emptyDir - secret - configMap {{- end -}}