From 7961479537091efddd64975c66a4fa077ff8560e Mon Sep 17 00:00:00 2001 From: Jason Montleon Date: Thu, 10 Oct 2024 15:06:12 -0400 Subject: [PATCH] :sparkles: Remove SCC Permissions to run rootless (#382) Signed-off-by: Jason Montleon --- .../konveyor-operator.clusterserviceversion.yaml | 10 +--------- helm/templates/rbac/hub_role.yaml | 8 -------- 2 files changed, 1 insertion(+), 17 deletions(-) diff --git a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml index 4c68c0bd..57c12c8b 100644 --- a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml +++ b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml @@ -103,7 +103,7 @@ metadata: categories: Modernization & Migration certified: "false" containerImage: quay.io/konveyor/tackle2-operator:latest - createdAt: "2024-08-19T17:42:17Z" + createdAt: "2024-10-09T15:56:59Z" description: Konveyor is an open-source application modernization platform that helps organizations safely and predictably modernize applications to Kubernetes at scale. @@ -331,14 +331,6 @@ spec: - '*' verbs: - '*' - - apiGroups: - - security.openshift.io - resourceNames: - - anyuid - resources: - - securitycontextconstraints - verbs: - - use serviceAccountName: tackle-hub - rules: - apiGroups: diff --git a/helm/templates/rbac/hub_role.yaml b/helm/templates/rbac/hub_role.yaml index caf74792..352b5b69 100644 --- a/helm/templates/rbac/hub_role.yaml +++ b/helm/templates/rbac/hub_role.yaml @@ -12,11 +12,3 @@ rules: - '*' verbs: - '*' -- apiGroups: - - security.openshift.io - resourceNames: - - anyuid - resources: - - securitycontextconstraints - verbs: - - use \ No newline at end of file