Add missing openshift standalone permission (kubeflow#897)

red-hat-data-services · Mar 29, 2022 · aa90528 · aa90528
1 parent 06487ac
commit aa90528
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/manifests/kustomize/third-party/openshift/standalone/anyuid-scc.yaml b/manifests/kustomize/third-party/openshift/standalone/anyuid-scc.yaml
@@ -34,8 +34,8 @@ users:
 #Minio accesses files owned by root
 - system:serviceaccount:kubeflow:minio
 #Katib injects container into pods which does not run as non-root user, trying to find Dockerfile for that image and fix it
-#- system:serviceaccount:kubeflow:default
 - system:serviceaccount:kubeflow:default
+- system:serviceaccount:kubeflow:pipeline-runner
 - system:serviceaccount:kubeflow:kubeflow-pipelines-cache
 - system:serviceaccount:kubeflow:kubeflow-pipelines-cache-deployer-sa
 - system:serviceaccount:kubeflow:metadata-grpc-server

diff --git a/manifests/kustomize/third-party/openshift/standalone/privileged-scc.yaml b/manifests/kustomize/third-party/openshift/standalone/privileged-scc.yaml
@@ -34,8 +34,8 @@ users:
 #Minio accesses files owned by root
 - system:serviceaccount:kubeflow:minio
 #Katib injects container into pods which does not run as non-root user, trying to find Dockerfile for that image and fix it
-#- system:serviceaccount:kubeflow:default
 - system:serviceaccount:kubeflow:default
+- system:serviceaccount:kubeflow:pipeline-runner
 - system:serviceaccount:kubeflow:kubeflow-pipelines-cache
 - system:serviceaccount:kubeflow:kubeflow-pipelines-cache-deployer-sa
 - system:serviceaccount:kubeflow:metadata-grpc-server