diff --git a/k8s/base/kustomization.yaml b/k8s/base/kustomization.yaml index ecf53dc..8b70399 100644 --- a/k8s/base/kustomization.yaml +++ b/k8s/base/kustomization.yaml @@ -1,4 +1,5 @@ --- resources: - namespace.yaml + - rolebinding.yaml - openstack-api-backup-cron.yaml diff --git a/k8s/base/openstack-api-backup-cron.yaml b/k8s/base/openstack-api-backup-cron.yaml index 0d85708..f27aca9 100644 --- a/k8s/base/openstack-api-backup-cron.yaml +++ b/k8s/base/openstack-api-backup-cron.yaml @@ -26,8 +26,6 @@ spec: capabilities: drop: - ALL - seccompProfile: - type: RuntimeDefault env: - name: HOME value: '/tmp' diff --git a/k8s/base/rolebinding.yaml b/k8s/base/rolebinding.yaml new file mode 100644 index 0000000..63b1a52 --- /dev/null +++ b/k8s/base/rolebinding.yaml @@ -0,0 +1,14 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: system:openshift:scc:anyuid + namespace: openstack-api-backup +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: system:openshift:scc:anyuid +subjects: + - kind: ServiceAccount + name: default + namespace: openstack-api-backup