[csi] some fixes to support containerdv2 (#127)

duckhawk · web-flow · commit 3e4b35b45761 · 2025-10-03T11:31:52.000+03:00
Signed-off-by: v.oleynikov &lt;vasily.oleynikov@flant.com&gt;
diff --git a/images/csi-nfs/mount-points.yaml b/images/csi-nfs/mount-points.yaml
@@ -1,3 +1,4 @@
 dirs:
   - /var/lib/kubelet/pods
   - /csi
+  - /run
diff --git a/images/wait-rpcbind/mount-points.yaml b/images/wait-rpcbind/mount-points.yaml
@@ -0,0 +1,2 @@
+dirs:
+  - /run
diff --git a/templates/csi/controller.yaml b/templates/csi/controller.yaml
@@ -22,6 +22,8 @@ checksum/ca: {{ .Values.csiNfs.tlsParameters.ca | sha256sum | quote }}
   volumeMounts:
     - name: host-run
       mountPath: /run
+  securityContext:
+    readOnlyRootFilesystem: true
 {{- end }}
 
 {{- if .Values.csiNfs.internal.featureTLSEnabled }}

-Original file line number
+Diff line change
@@ @@ -1,3 +1,4 @@ @@
 dirs:
   - /var/lib/kubelet/pods
   - /csi
 +  - /run