kind: SecurityContextConstraints
apiVersion: security.openshift.io/v1
metadata:
  labels:
    cdi.kubevirt.io/testing: ""
  name: cdi-testing-scc
allowHostDirVolumePlugin: true
allowHostIPC: false
allowHostNetwork: false
allowHostPID: false
allowHostPorts: false
allowPrivilegedContainer: true
readOnlyRootFilesystem: false
allowedCapabilities:
- 'SETFCAP'
seLinuxContext:
  type: RunAsAny
runAsUser:
  type: RunAsAny
users:
- system:serviceaccount:{{ .Namespace }}:cdi-testing-sa