Fix SCC (#1445)

stackrox · Nov 7, 2023 · ec396e5 · ec396e5
1 parent 307f921
commit ec396e5
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/dp-terraform/helm/rhacs-terraform/templates/scc.yaml b/dp-terraform/helm/rhacs-terraform/templates/scc.yaml
@@ -9,6 +9,13 @@ volumes:
 runAsUser:
   type: RunAsAny
 seLinuxContext:
-  type: RunAsAny
+  type: MustRunAs
 fsGroup:
   type: RunAsAny
+allowHostDirVolumePlugin: false
+allowHostIPC: false
+allowHostNetwork: false
+allowHostPID: false
+allowHostPorts: false
+allowPrivilegedContainer: false
+readOnlyRootFilesystem: false