redhat-performance / openshift-psap

Example roles and yaml files for performance-sensitive applications running on OpenShift
18 stars 14 forks source link

fix(scc): remove invalid defaultAddCapabilities setting #35

Closed ericavonb closed 5 years ago

ericavonb commented 5 years ago

Change defaultAddCapabilities in each scc spec from the invalid ['*'] to null. The API passes these values directly to the container runtime without validation. Any pod inheriting these add capabilities from the SCC will get an error from the runtime with Unknown capability to add: "Cap_*".

Bug: [#1636685](https://bugzilla.redhat.com/show_bug.cgi?id=1636685 Issue: openshift/origin#19575