fix: scc template in slim chart (#1137)

Signed-off-by: ericsyh <[email protected]>
streamnative · Dec 21, 2023 · a3c2540 · a3c2540
1 parent dc7d1f5
commit a3c2540
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 7 deletions.
diff --git a/charts/sn-platform-slim/templates/openshift/scc-rolebinding.yaml b/charts/sn-platform-slim/templates/openshift/scc-rolebinding.yaml
@@ -18,8 +18,7 @@
 #
 
 {{- if and .Values.openshift.enabled .Values.openshift.scc.enabled -}}
-{{- $sas := list (include "pulsar.vault.serviceAccount" .) -}}
-{{- $sas = append $sas (include "pulsar.zookeeper.serviceAccount" .) -}}
+{{- $sas := list (include "pulsar.zookeeper.serviceAccount" .) -}}
 {{- $sas = append $sas (include "pulsar.bookkeeper.serviceAccount" .) -}}
 {{- $sas = append $sas (include "pulsar.broker.serviceAccount" .) -}}
 {{- $sas = append $sas (include "pulsar.proxy.serviceAccount" .) -}}

diff --git a/charts/sn-platform-slim/templates/openshift/scc.yaml b/charts/sn-platform-slim/templates/openshift/scc.yaml
@@ -29,11 +29,6 @@ allowHostPID: false
 allowHostPorts: false
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
-allowedCapabilities:
-  {{- if .Values.components.vault }}
-  - IPC_LOCK
-  - SETFCAP
-  {{- end }}
 defaultAddCapabilities: null
 fsGroup:
   type: RunAsAny