Skip to content

Instantly share code, notes, and snippets.

@ghaskins
Created January 3, 2018 19:26
Show Gist options
  • Save ghaskins/74c3b02948b6cfd1139bfaccff0f8a05 to your computer and use it in GitHub Desktop.
Save ghaskins/74c3b02948b6cfd1139bfaccff0f8a05 to your computer and use it in GitHub Desktop.
$ cat concourse-scc.yml
kind: SecurityContextConstraints
apiVersion: v1
metadata:
name: concourse
allowPrivilegedContainer: true
defaultAddCapabilities:
- "SYS_ADMIN"
- "DAC_OVERRIDE"
- "DAC_READ_SEARCH"
- "KILL"
- "NET_ADMIN"
- "SETGID"
- "SETPCAP"
- "SETUID"
- "SYS_CHROOT"
- "SYS_PTRACE"
runAsUser:
type: RunAsAny
seLinuxContext:
type: RunAsAny
fsGroup:
type: RunAsAny
supplementalGroups:
type: RunAsAny
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment