mirror of
https://github.com/Microsoft/sql-server-samples.git
synced 2025-12-08 14:58:54 +00:00
39 lines
885 B
YAML
39 lines
885 B
YAML
apiVersion: security.openshift.io/v1
|
||
kind: SecurityContextConstraints
|
||
metadata:
|
||
annotations:
|
||
kubernetes.io/description: SQL Server BDC custom scc is based on 'nonroot' scc plus additional capabilities.
|
||
generation: 2
|
||
name: bdc-scc
|
||
allowHostDirVolumePlugin: false
|
||
allowHostIPC: false
|
||
allowHostNetwork: false
|
||
allowHostPID: false
|
||
allowHostPorts: false
|
||
allowPrivilegeEscalation: true
|
||
allowPrivilegedContainer: false
|
||
allowedCapabilities:
|
||
- SETUID
|
||
- SETGID
|
||
- CHOWN
|
||
- SYS_PTRACE
|
||
defaultAddCapabilities: null
|
||
fsGroup:
|
||
type: RunAsAny
|
||
readOnlyRootFilesystem: false
|
||
requiredDropCapabilities:
|
||
- KILL
|
||
- MKNOD
|
||
runAsUser:
|
||
type: MustRunAsNonRoot
|
||
seLinuxContext:
|
||
type: MustRunAs
|
||
supplementalGroups:
|
||
type: RunAsAny
|
||
volumes:
|
||
- configMap
|
||
- downwardAPI
|
||
- emptyDir
|
||
- persistentVolumeClaim
|
||
- projected
|
||
- secret |