diff --git a/manifests/09_deployment.yaml b/manifests/09_deployment.yaml index 6c37c2349..d1c06c85a 100644 --- a/manifests/09_deployment.yaml +++ b/manifests/09_deployment.yaml @@ -19,13 +19,13 @@ spec: name: openshift-controller-manager-operator annotations: target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' - openshift.io/required-scc: nonroot-v2 + openshift.io/required-scc: restricted-v3 labels: app: openshift-controller-manager-operator spec: + hostUsers: false securityContext: runAsNonRoot: true - runAsUser: 65534 seccompProfile: type: RuntimeDefault serviceAccountName: openshift-controller-manager-operator