From e5569f0547a98762d58b21481e0cafe938702bd7 Mon Sep 17 00:00:00 2001 From: Madhu Rajanna Date: Fri, 17 Sep 2021 13:55:26 +0530 Subject: [PATCH] deploy: remove securityContext from rbd provisioner we dont need securityContext for the rbd provisioner pod as its not doing any special operations like map ,unmap selinux etc. Signed-off-by: Madhu Rajanna --- deploy/rbd/kubernetes/csi-rbdplugin-provisioner.yaml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/deploy/rbd/kubernetes/csi-rbdplugin-provisioner.yaml b/deploy/rbd/kubernetes/csi-rbdplugin-provisioner.yaml index a1fcd2948..034d5f814 100644 --- a/deploy/rbd/kubernetes/csi-rbdplugin-provisioner.yaml +++ b/deploy/rbd/kubernetes/csi-rbdplugin-provisioner.yaml @@ -77,8 +77,6 @@ spec: - name: ADDRESS value: unix:///csi/csi-provisioner.sock imagePullPolicy: "IfNotPresent" - securityContext: - privileged: true volumeMounts: - name: socket-dir mountPath: /csi @@ -113,10 +111,6 @@ spec: - name: socket-dir mountPath: /csi - name: csi-rbdplugin - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] # for stable functionality replace canary with latest release version image: quay.io/cephcsi/cephcsi:canary args: @@ -167,10 +161,6 @@ spec: - name: ceph-config mountPath: /etc/ceph/ - name: csi-rbdplugin-controller - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] # for stable functionality replace canary with latest release version image: quay.io/cephcsi/cephcsi:canary args: