Skip to content

Move all workloads to `nonroot-v2` SCC

Clemens Beck requested to merge cb-update-scc-ocp into master

What does this MR do?

Move all workloads to nonroot-v2 SCC

  • Move webservice from anyuid to nonroot-v2 now that the puma memory killer was removed.
  • Move all other workloads but NGINX ingress, from nonroot to nonroot-v2, which is more restrictive.
  • Remove anyuid related RBAC resources.

Closes #811 (closed)

Changelog: changed

Checklist

See Definition of done.

For anything in this list which will not be completed, please provide a reason in the MR discussion.

Required

  • Merge Request Title and Description are up to date, accurate, and descriptive
  • MR targeting the appropriate branch
  • MR has a green pipeline on GitLab.com
  • When ready for review, MR is labeled "~workflow::ready for review" per the Distribution MR workflow

Expected (please provide an explanation if not completing)

  • Test plan indicating conditions for success has been posted and passes
  • Documentation created/updated
  • Tests added
  • Integration tests added to GitLab QA
  • Equivalent MR/issue for omnibus-gitlab opened
  • Validate potential values for new configuration settings. Formats such as integer 10, duration 10s, URI scheme://user:passwd@host:port may require quotation or other special handling when rendered in a template and written to a configuration file.

Related issues

Edited by Clemens Beck

Merge request reports