Run community catalogSource in restricted mode (#2915)

Problem: The helm template that defines the community catalogSource hasn't been updated to run the catalogSource in the restricted mode, causing the associated pod not to run. Solution: Update the helm template to configure the community catalogSource in restricted mode. Signed-off-by: Alexander Greene <[email protected]> Signed-off-by: Alexander Greene <[email protected]>
operator-framework · Jan 12, 2023 · 6c564a6 · 6c564a6
1 parent cf85bf7
commit 6c564a6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/deploy/chart/templates/0000_50_olm_17-upstream-operators.catalogsource.yaml b/deploy/chart/templates/0000_50_olm_17-upstream-operators.catalogsource.yaml
@@ -9,6 +9,8 @@ spec:
   image: quay.io/operatorhubio/catalog:latest
   displayName: Community Operators
   publisher: OperatorHub.io
+  grpcPodConfig:
+    securityContextConfig: restricted
   updateStrategy:
     registryPoll:
       interval: 60m