ROX-20654 Add SCC to allow using ephemeral volumes (#1440)

stackrox · Nov 6, 2023 · 5784849 · 5784849
1 parent db5adb0
commit 5784849
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/dp-terraform/helm/rhacs-terraform/templates/scc.yaml b/dp-terraform/helm/rhacs-terraform/templates/scc.yaml
@@ -0,0 +1,14 @@
+apiVersion: security.openshift.io/v1
+kind: SecurityContextConstraints
+metadata:
+  annotations:
+    kubernetes.io/description: custom-acscs-ephemeral-volumes allows pods to use the node's ephemeral storage. This is needed until the clusters are upgraded to 4.12 where the anyuid SCC allows using ephemeral volumes by default
+  name: custom-acscs-ephemeral-volumes
+volumes:
+  - ephemeral
+runAsUser:
+  type: RunAsAny
+seLinuxContext:
+  type: RunAsAny
+fsGroup:
+  type: RunAsAny