security/v1: add required SCC

martin-aders · Jul 3, 2023 · c1b364b · c1b364b
1 parent 9e8fb2c
commit c1b364b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/security/v1/consts.go b/security/v1/consts.go
@@ -7,4 +7,7 @@ const (
 	SupplementalGroupsAnnotation = "openshift.io/sa.scc.supplemental-groups"
 	MCSAnnotation                = "openshift.io/sa.scc.mcs"
 	ValidatedSCCAnnotation       = "openshift.io/scc"
+	// This annotation pins required SCCs for core OpenShift workloads to prevent preemption of custom SCCs.
+	// It is being used in the SCC admission plugin.
+	RequiredSCCAnnotation = "openshift.io/required-scc"
 )