Do Jenkins needs the sys_chroot capability to run on openshift-4

[Sameer Khamkar]

Hello Team,

 

we are shipping our Jenkins container on openshift platform, but it seems that we need to enable sys_chroot capabilities on openshift cluster to get Jenkins functional for openshift-4,

earlier we were using openshift-3 and by default this capability was enabled in version-3 but now due to security Redhat has kept this disabled.

So my question is do Jenkins needs the sys_chroot capability to run or it can run without sys chroot capabilities. if yes then why ?

your guidance will help us to configure our openshift cluster accordingly with security constraints. 

Regards,

Sameer 

[Sameer Khamkar]

Can someone please help me here?