Open tamalsaha opened 5 years ago
To modify your cluster so that it does not pre-allocate UIDs, allows containers to run as any user, and prevents privileged containers:
$ oc edit scc restricted
Change runAsUser.Type to RunAsAny.
https://docs.openshift.com/enterprise/3.0/admin_guide/manage_scc.html
By default, the execution of any container will be granted the restricted SCC and only the capabilities defined by that SCC.
https://blog.openshift.com/understanding-service-accounts-sccs/
https://github.com/tektoncd/pipeline/blob/c7c7385863ab53bbcb6a1912d4b89fc2c1ccc7ab/docs/install.md#installing-tekton-pipelines-on-openshiftminishift