helm: reduce the PSP permission for cephfs deployment

cephfs deployment doesnot need extra permission like
privileged,Capabilities and reduce unwanted volumes.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
This commit is contained in:
Madhu Rajanna 2021-09-17 14:04:13 +05:30 committed by mergify[bot]
parent 9bff7b0ac9
commit 8374fa929a

View File

@ -10,12 +10,8 @@ metadata:
release: {{ .Release.Name }} release: {{ .Release.Name }}
heritage: {{ .Release.Service }} heritage: {{ .Release.Service }}
spec: spec:
allowPrivilegeEscalation: true
allowedCapabilities:
- 'SYS_ADMIN'
fsGroup: fsGroup:
rule: RunAsAny rule: RunAsAny
privileged: true
runAsUser: runAsUser:
rule: RunAsAny rule: RunAsAny
seLinux: seLinux:
@ -27,7 +23,6 @@ spec:
- 'emptyDir' - 'emptyDir'
- 'projected' - 'projected'
- 'secret' - 'secret'
- 'downwardAPI'
- 'hostPath' - 'hostPath'
allowedHostPaths: allowedHostPaths:
- pathPrefix: '/dev' - pathPrefix: '/dev'