Update the scc policy for openshift

README.md

@@ -64,7 +64,7 @@ This repository contains a set of files to deploy ONLYOFFICE Docs into a Kuberne
 
 ## Deploy prerequisites
 
-Note: When installing to an OpenShift cluster, you must apply the `SecurityContextConstraints` policy, which adds permission to run containers from a user whose `ID = 1001`.
+Note: It may be required to apply `SecurityContextConstraints` when installing into OpenShift cluster as it adds permission to run containers by user with `ID = 1001`.
 
 To do this, run the following commands:
 ```
@@ -286,7 +286,7 @@ and then run the `helm upgrade documentserver onlyoffice/docs --set extraThemes.
 
 ## Deploy ONLYOFFICE Docs
 
-Note: When installing to an OpenShift cluster, you must apply the `SecurityContextConstraints` policy, which adds permission to run containers from a user whose `ID = 101`.
+Note: It may be required to apply `SecurityContextConstraints` when installing into OpenShift cluster as it adds permission to run containers by user with `ID = 101`.
 
 To do this, run the following commands:
 

sources/scc/docs-components.yaml

@@ -1,20 +1,19 @@
----
-apiVersion: security.openshift.io/v1
 kind: SecurityContextConstraints
+apiVersion: security.openshift.io/v1
 metadata:
   name: scc-docs-components
 allowPrivilegedContainer: false
-users: []
-groups: []
 runAsUser:
   type: MustRunAs
   uid: 101
+seLinuxContext:
+  type: MustRunAs
 fsGroup:
   type: MustRunAs
   ranges:
   - max: 101
     min: 101
 supplementalGroups:
   type: MustRunAs
-seLinuxContext:
-  type: MustRunAs
+users: []
+groups: []

sources/scc/helm-components.yaml

@@ -1,22 +1,21 @@
----
-apiVersion: security.openshift.io/v1
 kind: SecurityContextConstraints
+apiVersion: security.openshift.io/v1
 metadata:
   name: scc-helm-components
 allowPrivilegedContainer: false
-users: []
-groups: []
 runAsUser:
   type: MustRunAs
   uid: 1001
+seLinuxContext:
+  type: MustRunAs
 fsGroup:
   type: MustRunAs
   ranges:
   - max: 1001
     min: 1001
 supplementalGroups:
   type: MustRunAs
-seLinuxContext:
-  type: MustRunAs
+users: []
+groups: []
 seccompProfiles:
 - runtime/default