From 62a9ab6d9fa77f196869930a37f489c6e7884216 Mon Sep 17 00:00:00 2001 From: Madhu Rajanna Date: Fri, 17 Sep 2021 13:54:02 +0530 Subject: [PATCH] helm: remove securityContext from cephfs provisioner we dont need securityContext for the cephfs provisioner pod as its not doing any special operations. Signed-off-by: Madhu Rajanna --- .../ceph-csi-cephfs/templates/provisioner-deployment.yaml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/charts/ceph-csi-cephfs/templates/provisioner-deployment.yaml b/charts/ceph-csi-cephfs/templates/provisioner-deployment.yaml index 053f5dd3e..cf1ab09e5 100644 --- a/charts/ceph-csi-cephfs/templates/provisioner-deployment.yaml +++ b/charts/ceph-csi-cephfs/templates/provisioner-deployment.yaml @@ -84,8 +84,6 @@ spec: env: - name: ADDRESS value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - securityContext: - privileged: true volumeMounts: - name: socket-dir mountPath: /csi @@ -158,11 +156,6 @@ spec: fieldPath: spec.nodeName - name: CSI_ENDPOINT value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true volumeMounts: - name: socket-dir mountPath: /csi