thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Security Context Constraints (SCC)

OpenShift resources that control the security permissions pods can request, such as running as root or using host resources.

Definition

The default restricted-v2 SCC forces random non-root UIDs and drops capabilities. Granting anyuid or privileged SCCs to a service account should be justified and minimal.

Example

oc adm policy add-scc-to-user anyuid -z legacy-app

Exam tip

Images that require root fail on OpenShift by default; fix the image or grant an SCC to a dedicated service account.

Related terms