2.7.0 updates

ondat · Apr 12, 2022 · 8ada5c7 · 8ada5c7
1 parent f2fcebc
commit 8ada5c7
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 1 deletion.
diff --git a/charts/ondat-operator/templates/operator.yaml b/charts/ondat-operator/templates/operator.yaml
@@ -78,9 +78,16 @@ spec:
         - containerPort: 8443
           name: https
       securityContext:
-        runAsNonRoot: true
+        runAsUser: 65532
       serviceAccountName: {{ template "storageos.serviceAccountName" . }}
       terminationGracePeriodSeconds: 10
+      topologySpreadConstraints:
+        - labelSelector:
+            matchLabels:
+              app.kubernetes.io/component: operator
+          maxSkew: 1
+          topologyKey: kubernetes.io/hostname
+          whenUnsatisfiable: ScheduleAnyway
       volumes:
       - configMap:
           name: storageos-operator

diff --git a/charts/ondat-operator/templates/rbac.yaml b/charts/ondat-operator/templates/rbac.yaml
@@ -482,6 +482,18 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - security.openshift.io
+  resourceNames:
+  - privileged
+  resources:
+  - securitycontextconstraints
+  verbs:
+  - create
+  - delete
+  - get
+  - update
+  - use
 - apiGroups:
   - storageos.com
   resources: