Skip to content

Commit 95e7c4b

Browse files
committed
SDCICD-1436: set securityContextConfig restricted
This is causing a PodSecurityViolation leading to DVO not running on HCP clusters ``` Status: Message: couldn't ensure registry server - error ensuring pod: : error creating new pod: deployment-validation-operator-catalog-: pods "deployment-validation-operator-catalog-7wq6g" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "registry-server" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "registry-server" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "registry-server" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "registry-server" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") Reason: RegistryServerError ``` Signed-off-by: Brady Pratt <[email protected]>
1 parent c06face commit 95e7c4b

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

hack/olm-registry/hypershift-template.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -85,6 +85,8 @@ objects:
8585
image: ${REGISTRY_IMG}@${IMAGE_DIGEST}
8686
displayName: Deployment Validation Operator
8787
publisher: Red Hat
88+
grpcPodConfig:
89+
securityContextConfig: restricted
8890
- complianceType: MustHave
8991
objectDefinition:
9092
apiVersion: operators.coreos.com/v1

0 commit comments

Comments
 (0)