ceph-csi

mirror of https://github.com/ceph/ceph-csi.git synced 2024-11-23 23:00:19 +00:00

History

Madhu Rajanna f4d05a3ef9 CSI: run all containers as privileged in daemonset pods On systems with SELinux enabled, non-privileged containers can't access data of privileged containers. Since the socket is exposed by privileged containers, all sidecars must be privileged too. This is needed only for containers running in daemonset as we are using bidirectional mounts in daemonset Signed-off-by: Madhu Rajanna <madhupr007@gmail.com> (cherry picked from commit `e0cc7740f6`)	2020-01-16 19:32:28 +05:30
..
kubernetes	CSI: run all containers as privileged in daemonset pods	2020-01-16 19:32:28 +05:30

Madhu Rajanna f4d05a3ef9 CSI: run all containers as privileged in daemonset pods

On systems with SELinux enabled, non-privileged containers
can't access data of privileged containers. Since the socket
is exposed by privileged containers, all sidecars must be
privileged too. This is needed only for containers running
in daemonset as we are using bidirectional mounts in daemonset

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
(cherry picked from commit e0cc7740f6)

2020-01-16 19:32:28 +05:30

kubernetes CSI: run all containers as privileged in daemonset pods 2020-01-16 19:32:28 +05:30