From 9b9540698ff8e177edb89e54c4550692eb585562 Mon Sep 17 00:00:00 2001 From: Brian Ward Date: Thu, 7 Feb 2019 08:23:22 -0500 Subject: [PATCH] Remove system:authenticated from groups in SCC so that it does not override the existing default 'restricted' SCC --- Read-Only-FS/read-only-scc.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Read-Only-FS/read-only-scc.yaml b/Read-Only-FS/read-only-scc.yaml index 0bc6567..f2e8c71 100644 --- a/Read-Only-FS/read-only-scc.yaml +++ b/Read-Only-FS/read-only-scc.yaml @@ -15,8 +15,7 @@ allowedFlexVolumes: null defaultAddCapabilities: null fsGroup: type: MustRunAs -groups: -- system:authenticated +groups: [] priority: null readOnlyRootFilesystem: true requiredDropCapabilities: