Skip to content

Instantly share code, notes, and snippets.

@SergK
Last active November 4, 2022 14:06
Show Gist options
  • Save SergK/b263a7c5380952c345b5e9becba4b86d to your computer and use it in GitHub Desktop.
Save SergK/b263a7c5380952c345b5e9becba4b86d to your computer and use it in GitHub Desktop.
SecurityContextConstraints for ElasticSearch running as a part of ReportPortal
apiVersion: security.openshift.io/v1
kind: SecurityContextConstraints
metadata:
annotations:
"helm.sh/hook": "pre-install"
name: report-portal-elasticsearch
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
allowPrivilegedContainer: true
allowedCapabilities: []
allowedFlexVolumes: []
defaultAddCapabilities: []
fsGroup:
type: MustRunAs
ranges:
- max: 1000
min: 1000
groups: []
priority: 0
readOnlyRootFilesystem: false
requiredDropCapabilities: []
runAsUser:
type: MustRunAsRange
uidRangeMax: 1000
uidRangeMin: 0
seLinuxContext:
type: MustRunAs
supplementalGroups:
type: RunAsAny
users:
- system:serviceaccount:report-portal:elasticsearch-master
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment