From 8181d133132a4d3657e80b9fa356bb0726b99c11 Mon Sep 17 00:00:00 2001 From: Niels de Vos Date: Mon, 20 Mar 2023 11:41:53 +0100 Subject: [PATCH] ci: update mirroring container-images job for new OCP The new OpenShift cluster complained about deprecated types and missing options in the yaml files. Signed-off-by: Niels de Vos --- mirror/mirror-buildconfig.yaml | 4 ++-- mirror/mirror-cronjob.yaml | 9 ++++++++- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/mirror/mirror-buildconfig.yaml b/mirror/mirror-buildconfig.yaml index 96a0347e3..31b6ef876 100644 --- a/mirror/mirror-buildconfig.yaml +++ b/mirror/mirror-buildconfig.yaml @@ -1,5 +1,5 @@ --- -apiVersion: v1 +apiVersion: image.openshift.io/v1 kind: ImageStream metadata: name: mirror-images @@ -9,7 +9,7 @@ spec: tags: - name: latest --- -apiVersion: v1 +apiVersion: build.openshift.io/v1 kind: BuildConfig metadata: name: mirror-images diff --git a/mirror/mirror-cronjob.yaml b/mirror/mirror-cronjob.yaml index 4f0874a2b..ccb9395a2 100644 --- a/mirror/mirror-cronjob.yaml +++ b/mirror/mirror-cronjob.yaml @@ -1,5 +1,5 @@ --- -apiVersion: batch/v1beta1 +apiVersion: batch/v1 kind: CronJob metadata: name: mirror-images @@ -33,4 +33,11 @@ spec: secretKeyRef: name: container-registry-auth key: passwd + securityContext: + allowPrivilegeEscalation: false + runAsNonRoot: true + capabilities: + drop: ["ALL"] + seccompProfile: + type: RuntimeDefault restartPolicy: OnFailure