set scc privileged to false for webhook and secretshare (#1773)

* set scc privileged to false for webhook and secretshare Signed-off-by: Henry H Li <[email protected]> * removed keycloak themes Signed-off-by: Henry H Li <[email protected]> --------- Signed-off-by: Henry H Li <[email protected]>
IBM · Jan 25, 2024 · d1ecd2d · d1ecd2d
1 parent d997a5f
commit d1ecd2d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/controllers/constant/secretshare.go b/controllers/constant/secretshare.go
@@ -321,5 +321,6 @@ spec:
             memory: 200Mi
         securityContext:
           runAsNonRoot: true
+          privileged: false
       terminationGracePeriodSeconds: 10
 `
diff --git a/controllers/constant/webhook.go b/controllers/constant/webhook.go
@@ -1692,6 +1692,7 @@ spec:
               memory: 256Mi
           securityContext:
             runAsNonRoot: true
+            privileged: false
           volumeMounts:
           - name: webhook-certs
             mountPath: "/etc/ssl/certs/webhook"