fluent-bit-openshift-security-context-constraints.yaml

kind: SecurityContextConstraints
apiVersion: security.openshift.io/v1
metadata:
  name: logging
allowPrivilegedContainer: true
allowHostNetwork: true
allowHostDirVolumePlugin: true
priority:
allowedCapabilities: []
allowHostPorts: true
allowHostPID: true
allowHostIPC: true
readOnlyRootFilesystem: false
requiredDropCapabilities: []
defaultAddCapabilities: []
runAsUser:
  type: RunAsAny
seLinuxContext:
  type: MustRunAs
fsGroup:
  type: MustRunAs
supplementalGroups:
  type: RunAsAny
volumes:
  - configMap
  - downwardAPI
  - emptyDir
  - hostPath
  - persistentVolumeClaim
  - projected
  - secret
users:
  - system:serviceaccount:logging:builder
  - system:serviceaccount:logging:default
  - system:serviceaccount:logging:deployer
  - system:serviceaccount:logging:fluent-bit