If you've used the other 'oc adm' command to associate serviceaccounts with the SCCs, then I think the command would be similar: oc -n name-of-namespace adm policy add-scc-to-user hostmount-anyuid -z default   This SCC should already exist, so you can use that command or edit the rolebinding directly, so you end up with a subjects: entry for: - kind: ServiceAccount   name: default   namespace: name-of-namespace Notice that this change means you are granting elevated permissions to any pod that uses the 'default' service account and not just the model-repository pod. ... View more