diff --git a/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml b/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml index 64508b8fa..96d943a3e 100644 --- a/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml +++ b/deploy/cephfs/kubernetes/csi-cephfsplugin.yaml @@ -26,6 +26,7 @@ spec: # created by privileged CSI driver container. securityContext: privileged: true + allowPrivilegeEscalation: true image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.4.0 args: - "--v=5" @@ -106,6 +107,7 @@ spec: - name: liveness-prometheus securityContext: privileged: true + allowPrivilegeEscalation: true image: quay.io/cephcsi/cephcsi:v3.6-canary args: - "--type=liveness" diff --git a/deploy/rbd/kubernetes/csi-rbdplugin.yaml b/deploy/rbd/kubernetes/csi-rbdplugin.yaml index a5687c713..e41fd5905 100644 --- a/deploy/rbd/kubernetes/csi-rbdplugin.yaml +++ b/deploy/rbd/kubernetes/csi-rbdplugin.yaml @@ -28,6 +28,7 @@ spec: # created by privileged CSI driver container. securityContext: privileged: true + allowPrivilegeEscalation: true image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.4.0 args: - "--v=5" @@ -124,6 +125,7 @@ spec: - name: liveness-prometheus securityContext: privileged: true + allowPrivilegeEscalation: true image: quay.io/cephcsi/cephcsi:v3.6-canary args: - "--type=liveness"