mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-09 16:00:22 +00:00
deploy: setting RequiredDropCapabilities to ALL for ceph-csi scc
This commit sets the RequiredDropCapabilities of ceph-csi to "ALL". Signed-off-by: ShravaniVangur <shravanivangur@gmail.com>
This commit is contained in:
parent
b0751cb06e
commit
0eabe32b76
@ -20,6 +20,8 @@ allowHostPID: true
|
|||||||
allowHostIPC: true
|
allowHostIPC: true
|
||||||
# Set to false as we write to RootFilesystem inside csi containers
|
# Set to false as we write to RootFilesystem inside csi containers
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
|
requiredDropCapabilities:
|
||||||
|
- ALL
|
||||||
runAsUser:
|
runAsUser:
|
||||||
type: RunAsAny
|
type: RunAsAny
|
||||||
seLinuxContext:
|
seLinuxContext:
|
||||||
|
@ -27,6 +27,8 @@ allowHostPID: true
|
|||||||
allowHostIPC: true
|
allowHostIPC: true
|
||||||
# Set to false as we write to RootFilesystem inside csi containers
|
# Set to false as we write to RootFilesystem inside csi containers
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
|
requiredDropCapabilities:
|
||||||
|
- ALL
|
||||||
runAsUser:
|
runAsUser:
|
||||||
type: RunAsAny
|
type: RunAsAny
|
||||||
seLinuxContext:
|
seLinuxContext:
|
||||||
|
2
vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml
generated
vendored
2
vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml
generated
vendored
@ -20,6 +20,8 @@ allowHostPID: true
|
|||||||
allowHostIPC: true
|
allowHostIPC: true
|
||||||
# Set to false as we write to RootFilesystem inside csi containers
|
# Set to false as we write to RootFilesystem inside csi containers
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
|
requiredDropCapabilities:
|
||||||
|
- ALL
|
||||||
runAsUser:
|
runAsUser:
|
||||||
type: RunAsAny
|
type: RunAsAny
|
||||||
seLinuxContext:
|
seLinuxContext:
|
||||||
|
Loading…
Reference in New Issue
Block a user