blob: 6c4bb1d1e287c58ebd8420a0a8307f5095412990 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
allowHostDirVolumePlugin: true
allowHostIPC: false
allowHostNetwork: true
allowHostPID: false
allowHostPorts: false
allowPrivilegedContainer: false
allowedCapabilities: []
allowedFlexVolumes: []
apiVersion: v1
defaultAddCapabilities: []
fsGroup:
ranges:
- max: "{{ contiv_etcd_system_gid }}"
min: "{{ contiv_etcd_system_gid }}"
type: MustRunAs
groups: []
kind: SecurityContextConstraints
metadata:
annotations:
kubernetes.io/description: 'For contiv-etcd only.'
creationTimestamp: null
name: contiv-etcd
priority: null
readOnlyRootFilesystem: true
requiredDropCapabilities:
- KILL
- MKNOD
- SETUID
- SETGID
runAsUser:
type: MustRunAs
uid: "{{ contiv_etcd_system_uid }}"
seLinuxContext:
type: MustRunAs
supplementalGroups:
type: MustRunAs
users:
- system:serviceaccount:kube-system:contiv-etcd
volumes:
- emptyDir
- hostPath
- secret
|
