we are shipping our Jenkins container on openshift platform, but it seems that we need to enable sys_chroot capabilities on openshift cluster to get Jenkins functional for openshift-4,
earlier we were using openshift-3 and by default this capability was enabled in version-3 but now due to security Redhat has kept this disabled.
So my question is do Jenkins needs the sys_chroot capability to run or it can run without sys chroot capabilities. if yes then why ?
your guidance will help us to configure our openshift cluster accordingly with security constraints.