From 5fb34ef1fde69f00e5bc38d9f482761f5cf6361b Mon Sep 17 00:00:00 2001
From: Yu Qi Zhang <jerzhang@redhat.com>
Date: Wed, 22 Jan 2025 14:25:55 -0500
Subject: [PATCH] Add required-scc to criometricsproxy

Match 4.18+. I don't think this was checked in 4.17 explicitly but it
does sometimes fail when you do a 4.17->4.18 upgrade.
---
 .../master/01-master-kubelet/_base/files/criometricsproxy.yaml   | 1 +
 .../worker/01-worker-kubelet/_base/files/criometricsproxy.yaml   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/templates/master/01-master-kubelet/_base/files/criometricsproxy.yaml b/templates/master/01-master-kubelet/_base/files/criometricsproxy.yaml
index 79c01086ca..17ed1ffc8d 100644
--- a/templates/master/01-master-kubelet/_base/files/criometricsproxy.yaml
+++ b/templates/master/01-master-kubelet/_base/files/criometricsproxy.yaml
@@ -9,6 +9,7 @@ contents:
       namespace: openshift-machine-config-operator
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: privileged
     spec:
       volumes:
       - name: etc-kube
diff --git a/templates/worker/01-worker-kubelet/_base/files/criometricsproxy.yaml b/templates/worker/01-worker-kubelet/_base/files/criometricsproxy.yaml
index 79c01086ca..17ed1ffc8d 100644
--- a/templates/worker/01-worker-kubelet/_base/files/criometricsproxy.yaml
+++ b/templates/worker/01-worker-kubelet/_base/files/criometricsproxy.yaml
@@ -9,6 +9,7 @@ contents:
       namespace: openshift-machine-config-operator
       annotations:
         target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
+        openshift.io/required-scc: privileged
     spec:
       volumes:
       - name: etc-kube