mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-22 14:20:19 +00:00
helm: reduce the PSP permission for cephfs deployment
cephfs deployment doesnot need extra permission like privileged,Capabilities and reduce unwanted volumes. Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
This commit is contained in:
parent
9bff7b0ac9
commit
8374fa929a
@ -10,12 +10,8 @@ metadata:
|
|||||||
release: {{ .Release.Name }}
|
release: {{ .Release.Name }}
|
||||||
heritage: {{ .Release.Service }}
|
heritage: {{ .Release.Service }}
|
||||||
spec:
|
spec:
|
||||||
allowPrivilegeEscalation: true
|
|
||||||
allowedCapabilities:
|
|
||||||
- 'SYS_ADMIN'
|
|
||||||
fsGroup:
|
fsGroup:
|
||||||
rule: RunAsAny
|
rule: RunAsAny
|
||||||
privileged: true
|
|
||||||
runAsUser:
|
runAsUser:
|
||||||
rule: RunAsAny
|
rule: RunAsAny
|
||||||
seLinux:
|
seLinux:
|
||||||
@ -27,7 +23,6 @@ spec:
|
|||||||
- 'emptyDir'
|
- 'emptyDir'
|
||||||
- 'projected'
|
- 'projected'
|
||||||
- 'secret'
|
- 'secret'
|
||||||
- 'downwardAPI'
|
|
||||||
- 'hostPath'
|
- 'hostPath'
|
||||||
allowedHostPaths:
|
allowedHostPaths:
|
||||||
- pathPrefix: '/dev'
|
- pathPrefix: '/dev'
|
||||||
|
Loading…
Reference in New Issue
Block a user