kind: SecurityContextConstraints
apiVersion: v1
metadata:
  name: nfs-scc
allowPrivilegedContainer: true
allowedCapabilities:
- DAC_READ_SEARCH
- SYS_RESOURCE
runAsUser:
  type: RunAsAny
seLinuxContext:
  type: RunAsAny
fsGroup:
  type: RunAsAny
supplementalGroups:
  type: RunAsAny
users:
- system:serviceaccount:cml-nfs:cml-nfs-nfs-server-provisioner
