Remove system:authenticated from groups in SCC so that it does not override the existing default 'restricted' SCC

7 years ago · 9b9540698f
1 changed files with 1 additions and 2 deletions
--- a/Read-Only-FS/read-only-scc.yaml
+++ b/Read-Only-FS/read-only-scc.yaml
@ -15,8 +15,7 @@ allowedFlexVolumes: null
 defaultAddCapabilities: null
 fsGroup:
  type: MustRunAs
-groups:
+groups: []
 - system:authenticated
 priority: null
 readOnlyRootFilesystem: true
 requiredDropCapabilities: