Check what SCC has been added to a serviceAccount

Posted on

Hello everyone,

How can I tell what SCC has been added to a SA?

I have done this:

oc adm policy add-scc-to-user privileged -z fsgroup-runasany`

but when I do this, I do not see any annotations (I was expecting to see openshift.io/sa.scc.name: privileged or something similar)

oc describe sa fsgroup-runasany

and when I do this, I do not see the SA under users

oc describe sa fsgroup-runasany

My serviceaccount is working as expected (ie allowing me to run a pod with privileged: true so I assume the SCC is bound OK)

Probably missing something obvious (as normal)

thanks!

DJ

Responses