-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
4.13, 4.12, 4.14, 4.15, 4.16, 4.17
-
None
-
None
-
False
-
Description of problem:
- Using example YAML file SCC is not creating.
Version-Release number of selected component (if applicable):
How reproducible:
Create a SCC using example YAML file provided in the documentation.
Steps to Reproduce:
1. Create a SCC using example YAML file.
Actual results:
The SecurityContextConstraints "privileged" is invalid: requiredDropCapabilities: Invalid value: [v1.Capability("KILL", "MKNOD", "SETUID", "SETGID"): required capabilities must be empty when all capabilities are allowed by a wildcard
Expected results:
securitycontextconstraints.security.openshift.io/privileged created
Additional info:
The error is occurring because we are allowing all the capabilities in the "allowedCapabilities" section and again we are droping capabilities in "requiredDropCapabilities" section.
