OpenShift Security Context Constraints (SCC)

SCCs control what actions pods can perform and what host resources they can access. If no security context is specified, OpenShift applies the restricted SCC by default.

What SCCs Control

• Privileged container execution
• Linux capabilities requested by containers
• Host directory volume mounts
• SELinux context
• Container user and group IDs
• Host namespace and networking access
• FSGroup ownership of volumes
• Supplemental groups
• Read-only root filesystem requirement
• Volume types
• Seccomp profiles

SCC Reference