diff --git a/bindata/manifests/daemon/daemonset.yaml b/bindata/manifests/daemon/daemonset.yaml index e3e5526e0..c9b151520 100644 --- a/bindata/manifests/daemon/daemonset.yaml +++ b/bindata/manifests/daemon/daemonset.yaml @@ -23,6 +23,7 @@ spec: openshift.io/component: network annotations: kubectl.kubernetes.io/default-container: sriov-network-config-daemon + openshift.io/required-scc: privileged spec: hostNetwork: true hostPID: true diff --git a/bindata/manifests/operator-webhook/server.yaml b/bindata/manifests/operator-webhook/server.yaml index 188a7f182..29e369680 100644 --- a/bindata/manifests/operator-webhook/server.yaml +++ b/bindata/manifests/operator-webhook/server.yaml @@ -22,6 +22,8 @@ spec: metadata: labels: app: operator-webhook + annotations: + openshift.io/required-scc: restricted-v2 spec: securityContext: runAsNonRoot: true diff --git a/bindata/manifests/webhook/server.yaml b/bindata/manifests/webhook/server.yaml index 659f71b7e..95e020671 100644 --- a/bindata/manifests/webhook/server.yaml +++ b/bindata/manifests/webhook/server.yaml @@ -25,6 +25,8 @@ spec: component: network type: infra openshift.io/component: network + annotations: + openshift.io/required-scc: restricted-v2 spec: securityContext: runAsNonRoot: true diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index 586fa3f17..9247ac6d1 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -21,6 +21,8 @@ spec: metadata: labels: control-plane: controller-manager + annotations: + openshift.io/required-scc: restricted-v2 spec: securityContext: runAsNonRoot: true diff --git a/deploy/operator.yaml b/deploy/operator.yaml index 4236db22e..4f1412969 100644 --- a/deploy/operator.yaml +++ b/deploy/operator.yaml @@ -15,6 +15,8 @@ spec: metadata: labels: name: sriov-network-operator + annotations: + openshift.io/required-scc: restricted-v2 spec: affinity: nodeAffinity: diff --git a/deployment/sriov-network-operator-chart/templates/operator.yaml b/deployment/sriov-network-operator-chart/templates/operator.yaml index cd4e08192..29aead96d 100644 --- a/deployment/sriov-network-operator-chart/templates/operator.yaml +++ b/deployment/sriov-network-operator-chart/templates/operator.yaml @@ -15,6 +15,8 @@ spec: maxUnavailable: 33% template: metadata: + annotations: + openshift.io/required-scc: restricted-v2 labels: name: sriov-network-operator spec: