Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[release-v1.32] Attach OpenShift SCC to Calico components #3375

Merged
merged 3 commits into from
Jun 6, 2024
Merged

[release-v1.32] Attach OpenShift SCC to Calico components #3375

merged 3 commits into from
Jun 6, 2024

Commits on Jun 4, 2024

  1. Attach OpenShift SCC to Calico components 

    This changeset attaches OpenShift SCC to Calico OSS and Enterprise
components. The pre-defined `nonroot-v2` SCC is used for most of the
components to limit access to cluster resources. Core components use
pre-defined `privileged` SCC. Certain components like EgressGateway will
use custom defined SCCs.
    @hjiawei
    hjiawei committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    34402d0 View commit details
    Browse the repository at this point in the history

  2. Render SCC resources when needed

    @hjiawei
    hjiawei committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    158e9e3 View commit details
    Browse the repository at this point in the history

  3. Attach OpenShift nonroot-v2 SCC to Prometheus components 

    This change attaches nonroot-v2 SCC to Tigera prometheus operator,
prometheus, and prometheus service cluster roles. It is missed in [1].

[1] tigera#3357
    @hjiawei
    hjiawei committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    0544c10 View commit details
    Browse the repository at this point in the history