ceph-csi/deploy/cephfs/kubernetes
Silvan Loser f2e0fa28fb deploy: allowPrivilegeEscalation: true in containerSecurityContext
When running the kubernetes cluster with one single privileged
PodSecurityPolicy which is allowing everything the nodeplugin
daemonset can fail to start. To be precise the problem is the
defaultAllowPrivilegeEscalation: false configuration in the PSP.
 Containers of the nodeplugin daemonset won't start when they
have privileged: true but no allowPrivilegeEscalation in their
container securityContext.

Kubernetes will not schedule if this mismatch exists cannot set
allowPrivilegeEscalation to false and privileged to true:

Signed-off-by: Silvan Loser <silvan.loser@hotmail.ch>
Signed-off-by: Silvan Loser <33911078+losil@users.noreply.github.com>
2022-04-22 23:36:02 +00:00
..
csi-cephfsplugin-provisioner.yaml cephfs: change the image registry for sidecars 2022-04-20 10:05:13 +00:00
csi-cephfsplugin.yaml deploy: allowPrivilegeEscalation: true in containerSecurityContext 2022-04-22 23:36:02 +00:00
csi-config-map.yaml refact: Remove Kubernetes 1.13.x support 2020-01-20 10:32:30 +00:00
csi-nodeplugin-psp.yaml deploy: remove extra volumes from cephfs plugin PSP 2021-09-22 07:12:34 +00:00
csi-nodeplugin-rbac.yaml deploy: remove unnecessary aggregate clusterroles 2020-08-19 09:30:17 +00:00
csi-provisioner-psp.yaml deploy: reduce the PSP permission for cephfs deployment 2021-09-22 07:12:34 +00:00
csi-provisioner-rbac.yaml deploy: update csi-snapshotter sidecar to v5.0.1 2022-02-03 19:01:57 +00:00
csidriver.yaml cleanup: fix beta apiVersion for csidriver 2021-07-22 09:12:44 +00:00