From d5ddc2c4ebe9dccca55b06ff765686c2b1f3aafe Mon Sep 17 00:00:00 2001 From: Dylan Murray Date: Fri, 11 Oct 2024 13:17:59 -0400 Subject: [PATCH] :sparkles: Remove SCC Permissions to run rootless (#382) (#383) Signed-off-by: Jason Montleon (cherry picked from commit 7961479537091efddd64975c66a4fa077ff8560e) Co-authored-by: Jason Montleon --- .../konveyor-operator.clusterserviceversion.yaml | 10 +--------- helm/templates/rbac/hub_role.yaml | 8 -------- 2 files changed, 1 insertion(+), 17 deletions(-) diff --git a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml index 6af743ab..38162be5 100644 --- a/bundle/manifests/konveyor-operator.clusterserviceversion.yaml +++ b/bundle/manifests/konveyor-operator.clusterserviceversion.yaml @@ -103,7 +103,7 @@ metadata: categories: Modernization & Migration certified: "false" containerImage: quay.io/konveyor/tackle2-operator:latest - createdAt: "2024-07-24T20:21:03Z" + createdAt: "2024-10-09T15:56:59Z" description: Konveyor is an open-source application modernization platform that helps organizations safely and predictably modernize applications to Kubernetes at scale. @@ -329,14 +329,6 @@ spec: - '*' verbs: - '*' - - apiGroups: - - security.openshift.io - resourceNames: - - anyuid - resources: - - securitycontextconstraints - verbs: - - use serviceAccountName: tackle-hub - rules: - apiGroups: diff --git a/helm/templates/rbac/hub_role.yaml b/helm/templates/rbac/hub_role.yaml index caf74792..352b5b69 100644 --- a/helm/templates/rbac/hub_role.yaml +++ b/helm/templates/rbac/hub_role.yaml @@ -12,11 +12,3 @@ rules: - '*' verbs: - '*' -- apiGroups: - - security.openshift.io - resourceNames: - - anyuid - resources: - - securitycontextconstraints - verbs: - - use \ No newline at end of file