---
allowHostDirVolumePlugin: false
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
allowPrivilegeEscalation: true
allowPrivilegedContainer: false
allowedCapabilities: null
apiVersion: security.openshift.io/v1
defaultAddCapabilities: null
fsGroup:
  type: RunAsAny
groups: []
kind: SecurityContextConstraints
metadata:
  annotations:
    kubernetes.io/description: rsync-anyuid provides all features of the restricted
      SCC but allows users to run with any UID and any GID. This is specifically for
      the MTC controller to run rsync for copping data from one pvc to another.
    operator-sdk/primary-resource: openshift-migration/migration-controller
    operator-sdk/primary-resource-type: MigrationController.migration.openshift.io
    release.openshift.io/create-only: "true"
  creationTimestamp: "2025-10-27T12:42:27Z"
  generation: 1
  managedFields:
  - apiVersion: security.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:allowHostDirVolumePlugin: {}
      f:allowHostIPC: {}
      f:allowHostNetwork: {}
      f:allowHostPID: {}
      f:allowHostPorts: {}
      f:allowPrivilegeEscalation: {}
      f:allowPrivilegedContainer: {}
      f:fsGroup:
        .: {}
        f:type: {}
      f:groups: {}
      f:metadata:
        f:annotations:
          .: {}
          f:kubernetes.io/description: {}
          f:operator-sdk/primary-resource: {}
          f:operator-sdk/primary-resource-type: {}
          f:release.openshift.io/create-only: {}
      f:readOnlyRootFilesystem: {}
      f:requiredDropCapabilities: {}
      f:runAsUser:
        .: {}
        f:type: {}
      f:seLinuxContext:
        .: {}
        f:type: {}
      f:supplementalGroups:
        .: {}
        f:type: {}
      f:users: {}
      f:volumes: {}
    manager: OpenAPI-Generator
    operation: Update
    time: "2025-10-27T12:42:27Z"
  name: rsync-anyuid
  resourceVersion: "55387"
  uid: 8438dff4-8edc-4a6f-a85a-ffe0ad35fa8e
priority: null
readOnlyRootFilesystem: false
requiredDropCapabilities:
- MKNOD
- SETPCAP
runAsUser:
  type: RunAsAny
seLinuxContext:
  type: MustRunAs
supplementalGroups:
  type: RunAsAny
users:
- system:serviceaccount:openshift-migration:migration-controller
volumes:
- configMap
- downwardAPI
- emptyDir
- persistentVolumeClaim
- projected
- secret
