From 40c82ae555ae6ab2946e00ca48f378bbdd0fa9fb Mon Sep 17 00:00:00 2001 From: David Eads Date: Tue, 9 Oct 2018 10:30:00 -0400 Subject: [PATCH] remove unnecessary scc --- .../tectonic-system-03-privileged-scc.go | 38 ------------------- pkg/asset/manifests/tectonic.go | 1 - 2 files changed, 39 deletions(-) delete mode 100644 pkg/asset/manifests/content/tectonic/tectonic-system-03-privileged-scc.go diff --git a/pkg/asset/manifests/content/tectonic/tectonic-system-03-privileged-scc.go b/pkg/asset/manifests/content/tectonic/tectonic-system-03-privileged-scc.go deleted file mode 100644 index 1197130c046..00000000000 --- a/pkg/asset/manifests/content/tectonic/tectonic-system-03-privileged-scc.go +++ /dev/null @@ -1,38 +0,0 @@ -package tectonic - -const ( - // PriviledgedSccTectonicSystem is the variable/constant representing the contents of the respective file - PriviledgedSccTectonicSystem = ` -apiVersion: security.openshift.io/v1 -kind: SecurityContextConstraints -metadata: - annotations: - kubernetes.io/description: "privileged-tectonic temporarily for running tectonic assets." - name: privileged-tectonic -allowHostDirVolumePlugin: true -allowHostIPC: true -allowHostNetwork: true -allowHostPID: true -allowHostPorts: true -allowPrivilegedContainer: true -allowedCapabilities: - - "*" -fsGroup: - type: RunAsAny -groups: - - system:serviceaccounts:tectonic-system - - system:serviceaccounts:openshift-ingress -readOnlyRootFilesystem: false -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: - - "*" -supplementalGroups: - type: RunAsAny -users: [] -volumes: - - "*" -` -) diff --git a/pkg/asset/manifests/tectonic.go b/pkg/asset/manifests/tectonic.go index 219a3c05424..de6ef0d4f25 100644 --- a/pkg/asset/manifests/tectonic.go +++ b/pkg/asset/manifests/tectonic.go @@ -71,7 +71,6 @@ func (t *Tectonic) Generate(dependencies asset.Parents) error { "99_tectonic-system-00-binding-admin.yaml": []byte(content.BindingAdmin), "99_tectonic-system-01-ca-cert.yaml": applyTemplateData(content.CaCertTectonicSystem, templateData), "99_tectonic-system-02-pull.json": applyTemplateData(content.PullTectonicSystem, templateData), - "99_tectonic-system-03-privileged-scc.yaml": []byte(content.PriviledgedSccTectonicSystem), } t.files = make([]*asset.File, 0, len(assetData))