From 98ef6e76140d6ad660880415eec31b6160cdc06e Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Tue, 30 Jul 2024 17:36:38 +0200 Subject: [PATCH 1/2] Update version in antora.yml to 24.7.0 --- antora.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/antora.yml b/antora.yml index 3d9439389..76433a45f 100644 --- a/antora.yml +++ b/antora.yml @@ -1,5 +1,5 @@ name: home -version: "nightly" +version: "24.7" title: Stackable Documentation nav: - modules/ROOT/nav1.adoc @@ -14,7 +14,7 @@ nav: - modules/ROOT/nav3.adoc # this is for the extra bits at the end of the menu # The prerelease setting affects version sorting. # Set to 'true' for nightly and false otherwise. -prerelease: true +prerelease: false # The attributes below are specific to this component and version # https://docs.antora.org/antora/latest/component-attributes/#hard-set asciidoc: @@ -22,7 +22,7 @@ asciidoc: # Keep this version in line with the 'version' key above # The versions for the CRD docs are either 'nightly' or # a full major.minor.patch version like 23.7.1 - crd-docs-version: "nightly" + crd-docs-version: "24.7.0" # Whether this version is already end of life. # If true, a banner will be displayed informing the user. end-of-life: false From cffac212a14c342e3d575ac641a3a52ac1e56b1b Mon Sep 17 00:00:00 2001 From: Razvan-Daniel Mihai <84674+razvan@users.noreply.github.com> Date: Tue, 6 Aug 2024 18:29:37 +0200 Subject: [PATCH 2/2] feat(openshit): document sccs --- modules/ROOT/pages/kubernetes/openshift.adoc | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/modules/ROOT/pages/kubernetes/openshift.adoc b/modules/ROOT/pages/kubernetes/openshift.adoc index 03f785c52..8a00de286 100644 --- a/modules/ROOT/pages/kubernetes/openshift.adoc +++ b/modules/ROOT/pages/kubernetes/openshift.adoc @@ -43,3 +43,12 @@ spec: - name: WATCH_NAMESPACE value: kafka-namespace ---- + +== Security context constraints + +Starting with the release version `24.7.0`, all products run with the `nonroot-v2` security context constraints (SCC) on OpenShift. + +Operators (with two exceptions) don't request a spcific SCC to run under. Usually OpenShift will select the `restricted` or `restricted-v2` SCC unless the cluster admins have specifically assigned a different one to the namespace where the operators are running. +The two exceptions are the secret and the listener operators. + +