diff --git a/bindata/manifests/daemon/daemonset.yaml b/bindata/manifests/daemon/daemonset.yaml index ec28ffe10b..ac740db667 100644 --- a/bindata/manifests/daemon/daemonset.yaml +++ b/bindata/manifests/daemon/daemonset.yaml @@ -23,6 +23,7 @@ spec: openshift.io/component: network annotations: kubectl.kubernetes.io/default-container: sriov-network-config-daemon + openshift.io/required-scc: privileged target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' spec: hostNetwork: true diff --git a/bindata/manifests/operator-webhook/server.yaml b/bindata/manifests/operator-webhook/server.yaml index 190adc21a0..ca56a8a44e 100644 --- a/bindata/manifests/operator-webhook/server.yaml +++ b/bindata/manifests/operator-webhook/server.yaml @@ -21,6 +21,7 @@ spec: template: metadata: annotations: + openshift.io/required-scc: restricted-v2 target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' labels: app: operator-webhook diff --git a/bindata/manifests/webhook/server.yaml b/bindata/manifests/webhook/server.yaml index c37eb8240d..a19bdd13eb 100644 --- a/bindata/manifests/webhook/server.yaml +++ b/bindata/manifests/webhook/server.yaml @@ -21,6 +21,7 @@ spec: template: metadata: annotations: + openshift.io/required-scc: restricted-v2 target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' labels: app: network-resources-injector diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml index 50aee9ca3c..503c6b7857 100644 --- a/config/manager/manager.yaml +++ b/config/manager/manager.yaml @@ -20,6 +20,7 @@ spec: template: metadata: annotations: + openshift.io/required-scc: restricted-v2 target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' labels: name: sriov-network-operator diff --git a/deploy/operator.yaml b/deploy/operator.yaml index 4236db22e0..4f14129691 100644 --- a/deploy/operator.yaml +++ b/deploy/operator.yaml @@ -15,6 +15,8 @@ spec: metadata: labels: name: sriov-network-operator + annotations: + openshift.io/required-scc: restricted-v2 spec: affinity: nodeAffinity: diff --git a/deployment/sriov-network-operator-chart/templates/operator.yaml b/deployment/sriov-network-operator-chart/templates/operator.yaml index cd4e08192e..29aead96d0 100644 --- a/deployment/sriov-network-operator-chart/templates/operator.yaml +++ b/deployment/sriov-network-operator-chart/templates/operator.yaml @@ -15,6 +15,8 @@ spec: maxUnavailable: 33% template: metadata: + annotations: + openshift.io/required-scc: restricted-v2 labels: name: sriov-network-operator spec: