✨ Remove SCC Permissions to run rootless (#382) (#383)

Signed-off-by: Jason Montleon <jmontleo@redhat.com> (cherry picked from commit 7961479) Co-authored-by: Jason Montleon <jmontleo@redhat.com>
konveyor · Oct 11, 2024 · d5ddc2c · d5ddc2c
1 parent 9d41c5a
commit d5ddc2c
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 17 deletions.
diff --git a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml
@@ -103,7 +103,7 @@ metadata:
     categories: Modernization & Migration
     certified: "false"
     containerImage: quay.io/konveyor/tackle2-operator:latest
-    createdAt: "2024-07-24T20:21:03Z"
+    createdAt: "2024-10-09T15:56:59Z"
     description: Konveyor is an open-source application modernization platform that
       helps organizations safely and predictably modernize applications to Kubernetes
       at scale.
@@ -329,14 +329,6 @@ spec:
           - '*'
           verbs:
           - '*'
-        - apiGroups:
-          - security.openshift.io
-          resourceNames:
-          - anyuid
-          resources:
-          - securitycontextconstraints
-          verbs:
-          - use
         serviceAccountName: tackle-hub
       - rules:
         - apiGroups:

diff --git a/helm/templates/rbac/hub_role.yaml b/helm/templates/rbac/hub_role.yaml
@@ -12,11 +12,3 @@ rules:
   - '*'
   verbs:
   - '*'
-- apiGroups:
-  - security.openshift.io
-  resourceNames:
-  - anyuid
-  resources:
-  - securitycontextconstraints
-  verbs:
-  - use