If you've used the other 'oc adm' command to associate serviceaccounts with the SCCs, then I think the command would be similar:
oc -n name-of-namespace adm policy add-scc-to-user hostmount-anyuid -z default
This SCC should already exist, so you can use that command or edit the rolebinding directly, so you end up with a subjects: entry for:
- kind: ServiceAccount name: default namespace: name-of-namespace
Notice that this change means you are granting elevated permissions to any pod that uses the 'default' service account and not just the model-repository pod.
... View more