add permissions note in scc (#4851)

* permissions comments to scc * update scc
DataDog · Feb 12, 2020 · 79046ed · 79046ed
1 parent cbbb11d
commit 79046ed
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Dockerfiles/manifests/openshift/scc.yaml b/Dockerfiles/manifests/openshift/scc.yaml
@@ -46,6 +46,13 @@ runAsUser:
   type: RunAsAny
 supplementalGroups:
   type: RunAsAny
+# If your environment restricts user access to the Docker socket or journald (for logging)
+# create or use an existing group that has access and add the GID to
+# the lines below (also remove the previous line, `type: RunAsAny`)
+#   type: MustRunAs
+#   ranges:
+#   - min: <min-group-ID>
+#   - max: <max-group-ID>
 seccompProfiles: []
 requiredDropCapabilities: []
 allowedCapabilities: []