Merge pull request #73 from maiqueb/synch-repo-scc-manifest

Synch repo scc manifest
kubevirt · May 23, 2022 · e660056 · e660056
2 parents 32b8a2b + 8cc7f70
commit e660056
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/automation/check-patch.setup.sh b/automation/check-patch.setup.sh
@@ -27,3 +27,12 @@ cp -rf $(pwd)/. ${TMP_PROJECT_PATH}
 
 echo 'Exporting temporary project path'
 export TMP_PROJECT_PATH
+
+echo 'Ensuring the manifests are in sync'
+if [[ -n $(git status --porcelain 2>/dev/null) ]]; then
+    echo "ERROR: git tree state is not clean!"
+    echo "Run `make manifests` and commit those changes"
+    git status
+    git diff
+    exit 1
+fi
diff --git a/manifests/scc.yaml b/manifests/scc.yaml
@@ -6,9 +6,15 @@ metadata:
 allowHostNetwork: true
 allowPrivilegedContainer: true
 allowHostDirVolumePlugin: true
+allowHostIPC: false
+allowHostPID: false
+allowHostPorts: false
+readOnlyRootFilesystem: false
 runAsUser:
   type: RunAsAny
 seLinuxContext:
   type: RunAsAny
 users:
   - system:serviceaccount:default:macvtap-cni
+volumes:
+  - hostPath