To me it work just fine with only cluster-admin and without 'privileged' scc:
[student@workstation ~]$ oc get pods
NAME READY STATUS RESTARTS AGE
image-pruner-28479968-4fl7z 0/1 Completed 0 9m5s
image-pruner-28479972-tlzx6 0/1 Completed 0 5m5s
image-pruner-28479976-lq25s 0/1 Completed 0 65s
Red Hat
Learning Community
A collaborative learning environment, enabling open source skill development.