✨ Remove SCC Permissions to run rootless (#382)

Signed-off-by: Jason Montleon <jmontleo@redhat.com>
konveyor · Oct 10, 2024 · 7961479 · 7961479
1 parent ff6e6f3
commit 7961479
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 17 deletions.
diff --git a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml
@@ -103,7 +103,7 @@ metadata:
     categories: Modernization & Migration
     certified: "false"
     containerImage: quay.io/konveyor/tackle2-operator:latest
-    createdAt: "2024-08-19T17:42:17Z"
+    createdAt: "2024-10-09T15:56:59Z"
     description: Konveyor is an open-source application modernization platform that
       helps organizations safely and predictably modernize applications to Kubernetes
       at scale.
@@ -331,14 +331,6 @@ spec:
           - '*'
           verbs:
           - '*'
-        - apiGroups:
-          - security.openshift.io
-          resourceNames:
-          - anyuid
-          resources:
-          - securitycontextconstraints
-          verbs:
-          - use
         serviceAccountName: tackle-hub
       - rules:
         - apiGroups:

diff --git a/helm/templates/rbac/hub_role.yaml b/helm/templates/rbac/hub_role.yaml
@@ -12,11 +12,3 @@ rules:
   - '*'
   verbs:
   - '*'
-- apiGroups:
-  - security.openshift.io
-  resourceNames:
-  - anyuid
-  resources:
-  - securitycontextconstraints
-  verbs:
-  - use