the Role should be gitlab-app-role-anyuid and have this mappingrules: - verbs: - use apiGroups: - security.openshift.io resources: - securitycontextconstraints resourceNames: - anyuid