mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2024-11-26 00:00:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

deploy: allow hostPort 29653 for NFS node-plugin

Browse Source 
This should address the following failure when Pod Security Policies are
enabled:

> FailedCreate: Error creating: pods "csi-nfs-node-" is forbidden:
> PodSecurityPolicy: unable to admit pod: spec.containers[2].hostPort:
> Invalid value: 29653: Host port 29653 is not allowed to be used.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos 2022-04-22 11:50:23 +02:00 committed by mergify[bot]
parent c137af57f3
commit 1818529a4c
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
deploy/nfs/kubernetes/csi-nodeplugin-psp.yaml
View File

@ -43,7 +43,9 @@ spec:
readOnly: false readOnly: false
- pathPrefix: '/var/lib/kubelet/plugins' - pathPrefix: '/var/lib/kubelet/plugins'
readOnly: false readOnly: false
hostPorts:
- min: 29653
max: 29653
--- ---
kind: Role kind: Role
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1