From e45bf03bd87f9b3645b332504fd6fc82052ce2e7 Mon Sep 17 00:00:00 2001 From: Madhu Rajanna Date: Fri, 17 Sep 2021 14:09:19 +0530 Subject: [PATCH] helm: remove securityContext from cephfs deployment we dont need securityContext for the cephfs provisioner pod as its not doing any special operations like mount, selinux operations etc . Signed-off-by: Madhu Rajanna --- .../templates/provisioner-deployment.yaml | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/charts/ceph-csi-rbd/templates/provisioner-deployment.yaml b/charts/ceph-csi-rbd/templates/provisioner-deployment.yaml index d4b2426f6..5c20f545b 100644 --- a/charts/ceph-csi-rbd/templates/provisioner-deployment.yaml +++ b/charts/ceph-csi-rbd/templates/provisioner-deployment.yaml @@ -105,8 +105,6 @@ spec: env: - name: ADDRESS value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - securityContext: - privileged: true volumeMounts: - name: socket-dir mountPath: /csi @@ -164,11 +162,6 @@ spec: fieldPath: spec.nodeName - name: CSI_ENDPOINT value: "unix:///csi/{{ .Values.provisionerSocketFile }}" - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true volumeMounts: - name: socket-dir mountPath: /csi @@ -205,11 +198,6 @@ spec: fieldPath: metadata.namespace - name: DRIVER_NAME value: {{ .Values.driverName }} - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] - allowPrivilegeEscalation: true volumeMounts: - name: ceph-csi-config mountPath: /etc/ceph-csi-config/