Skip to content

Commit

Permalink
Merge pull request #193 from octarinesec/merge-main-after602
Browse files Browse the repository at this point in the history
Merge main after602
  • Loading branch information
BenRub authored Oct 19, 2023
2 parents e8839a1 + ffdc9e5 commit dfa2e97
Show file tree
Hide file tree
Showing 2 changed files with 40 additions and 3 deletions.
41 changes: 39 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ The Carbon Black Cloud Container Operator utilizes the operator-framework to cre

| Operator version | Kubernetes Sensor Component Version | Minimum Kubernetes Version |
|------------------|-------------------------------------|----------------------------|
| v6.0.x | 2.10.0, 2.11.0, 2.12.0, 3.0.0 | 1.18 |
| v6.0.x | 2.10.0, 2.11.0, 2.12.0, 3.0.X | 1.18 |
| v5.6.x | 2.10.0, 2.11.0, 2.12.0 | 1.16 |
| v5.5.x | 2.10.0, 2.11.0 | 1.16 |

Expand All @@ -27,7 +27,7 @@ Kubernetes 1.18+ is supported.

### From script:
```
export OPERATOR_VERSION=v6.0.1
export OPERATOR_VERSION=v6.0.2
export OPERATOR_SCRIPT_URL=https://setup.containers.carbonblack.io/$OPERATOR_VERSION/operator-apply.sh
curl -s $OPERATOR_SCRIPT_URL | bash
```
Expand Down Expand Up @@ -501,3 +501,40 @@ volumes:
users:
- system:serviceaccount:cbcontainers-dataplane:cbcontainers-agent-node
```

### Uninstalling on Openshift

Add this SecurityContextConstraints
before running the operator uninstall command

```yaml
kind: SecurityContextConstraints
apiVersion: security.openshift.io/v1
metadata:
name: scc-edr-cleaner
runAsUser:
type: RunAsAny
allowHostPID: true
allowHostPorts: false
allowHostNetwork: true
allowHostDirVolumePlugin: true
allowHostIPC: false
allowPrivilegedContainer: true
readOnlyRootFilesystem: false
seLinuxContext:
type: RunAsAny
fsGroup:
type: RunAsAny
supplementalGroups:
type: RunAsAny
volumes:
- configMap
- downwardAPI
- emptyDir
- hostPath
- persistentVolumeClaim
- projected
- secret
users:
- system:serviceaccount:cbcontainers-edr-sensor-cleaners:cbcontainers-edr-sensor-cleaner
```
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@ name: cbcontainers-agent
description: A Helm chart for installing the CBContainers Agent
type: application
version: 2.0.0
appVersion: "main"
appVersion: "3.0.2"

0 comments on commit dfa2e97

Please sign in to comment.