Merge pull request #73 from maiqueb/synch-repo-scc-manifest

Synch repo scc manifest

Author: kubevirt-bot

automation/check-patch.setup.sh

@@ -27,3 +27,12 @@ cp -rf $(pwd)/. ${TMP_PROJECT_PATH}
 
 echo 'Exporting temporary project path'
 export TMP_PROJECT_PATH
+
+echo 'Ensuring the manifests are in sync'
+if [[ -n $(git status --porcelain 2>/dev/null) ]]; then
+    echo "ERROR: git tree state is not clean!"
+    echo "Run `make manifests` and commit those changes"
+    git status
+    git diff
+    exit 1
+fi

manifests/scc.yaml

@@ -6,9 +6,15 @@ metadata:
 allowHostNetwork: true
 allowPrivilegedContainer: true
 allowHostDirVolumePlugin: true
+allowHostIPC: false
+allowHostPID: false
+allowHostPorts: false
+readOnlyRootFilesystem: false
 runAsUser:
   type: RunAsAny
 seLinuxContext:
   type: RunAsAny
 users:
   - system:serviceaccount:default:macvtap-cni
+volumes:
+  - hostPath