Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-11933

pod scc annotation shows "privileged" even though the audit logs mention "anyuid" SCC was picked

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • 4.16.0
    • 4.12.z
    • apiserver-auth
    • None
    • Important
    • No
    • Auth - Sprint 236, Auth - Sprint 237, Auth - Sprint 238, Auth - Sprint 239, Auth - Sprint 240, Auth - Sprint 241, Auth - Sprint 242, Auth - Sprint 243, Auth - Sprint 245, Auth - Sprint 249, Auth - Sprint 250
    • 11
    • Rejected
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      When I create a pod with empty security context as a user that has access to all SCCs, the SCC annotation shows "privileged"

      Version-Release number of selected component (if applicable):

      4.12

      How reproducible:

      100%

      Steps to Reproduce:

      1. create a bare pod with an empty security context
      2. look at the "openshift.io/scc" annotation 

      Actual results:

      privileged

      Expected results:

      anyuid

      Additional info:

      kind: Pod
      apiVersion: v1
      metadata:
        name: mypod
      spec:
          restartPolicy: Never
          containers:
          - name: fedora
            image: fedora:latest
            command:
            - sleep
            args:
            - "infinity"

       

      Attachments

        Activity

          People

            rh-ee-irinis Ilias Rinis
            slaznick@redhat.com Stanislav Laznicka
            Deepak Punia Deepak Punia
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

            Dates

              Created:
              Updated: