14.5. SCC (Security Context Constraints) へのロールベースのアクセス

oc create role <role-name> --verb=use --resource=scc --resource-name=<scc-name> -n <namespace>

$ oc create role <role-name> --verb=use --resource=scc --resource-name=<scc-name> -n <namespace>

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
...
  name: role-name 
  namespace: namespace 
...
rules:
- apiGroups:
  - security.openshift.io 
  resourceNames:
  - scc-name 
  resources:
  - securitycontextconstraints 
  verbs: 
  - use

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
...
  name: role-name 

  namespace: namespace 

...
rules:
- apiGroups:
  - security.openshift.io 

  resourceNames:
  - scc-name 

  resources:
  - securitycontextconstraints 

  verbs: 

  - use