Skip to content

Commit

Permalink
(catsrc) rename grpcPodConfig.runAsRoot to grpcPodConfig.SecurityCont…
Browse files Browse the repository at this point in the history
…extConfig

Accepted values for SecurityContextConfig(string): legacy/resctricted(default)
  • Loading branch information
anik120 committed Sep 12, 2022
1 parent c6d2f45 commit a16870e
Show file tree
Hide file tree
Showing 3 changed files with 49 additions and 7 deletions.
6 changes: 3 additions & 3 deletions crds/operators.coreos.com_catalogsources.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -79,9 +79,9 @@ spec:
priorityClassName:
description: If specified, indicates the pod's priority. If not specified, the pod priority will be default or zero if there is no default.
type: string
runAsRoot:
description: RunAsRoot allows admins to indicate that they wish to run the container inside the CatalogSource pod in a privileged mode as root. This should only be enabled when running older catalog images which could not be run as non-root.
type: boolean
securityContextConfig:
description: 'SecurityContextConfig can be one of `legacy` or `restricted`. The CatalogSource''s pod is either injected with the right pod.spec.securityContext and pod.spec.container[*].securityContext values to allow the pod to run in Pod Security Admission(PSA) controller''s `restricted` mode, or doesn''t set these values at all, in which case the pod can only be run in PSA `privileged` namespaces. By default, SecurityContextConfig is set to `restricted`. If the value is unspecified, the default value of `restricted` is used. Specifying any other value will result in a validation error. When using older catalog images, which could not be run in restricted mode, the SecurityContextConfig should be set to `legacy`. More information about PSA can be found here: https://kubernetes.io/docs/concepts/security/pod-security-admission/'''
type: string
tolerations:
description: Tolerations are the catalog source's pod's tolerations.
type: array
Expand Down
Loading

0 comments on commit a16870e

Please sign in to comment.