From f1c64a2a6b7663f8668972e487c71efe319d5a73 Mon Sep 17 00:00:00 2001 From: Madhu Rajanna Date: Fri, 17 Sep 2021 13:52:52 +0530 Subject: [PATCH] deploy: remove securityContext from cephfs provisioner we dont need securityContext for the cephfs provisioner pod as its not doing any special operations like mounts, selinux etc. Signed-off-by: Madhu Rajanna --- deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml b/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml index a3d12ae72..ef4327913 100644 --- a/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml +++ b/deploy/cephfs/kubernetes/csi-cephfsplugin-provisioner.yaml @@ -86,8 +86,6 @@ spec: - name: ADDRESS value: unix:///csi/csi-provisioner.sock imagePullPolicy: "IfNotPresent" - securityContext: - privileged: true volumeMounts: - name: socket-dir mountPath: /csi @@ -106,10 +104,6 @@ spec: - name: socket-dir mountPath: /csi - name: csi-cephfsplugin - securityContext: - privileged: true - capabilities: - add: ["SYS_ADMIN"] # for stable functionality replace canary with latest release version image: quay.io/cephcsi/cephcsi:canary args: