-
Notifications
You must be signed in to change notification settings - Fork 154
Open
Description
Is your feature request related to a problem?/Why is this needed
I want to use ephemeral CSI volumes on OpenShift, but this requires the privileged security profile by default.
It is however possible to change this for a specific driver by setting the following label on the CSIDriver resource:
kind: CSIDriver
metadata:
name: smb.csi.k8s.io
labels:
security.openshift.io/csi-ephemeral-volume-profile: restricted See https://docs.okd.io/4.18/storage/container_storage_interface/ephemeral-storage-csi-inline.html
Describe the solution you'd like in detail
It would be nice if this label could be set using Helm values, e.g. driverLabels similar to how Pod labels can be configured with podLabels.
Describe alternatives you've considered
The alternative would be to set the label manually after installation but this is not a robust solution.
Additional context
Metadata
Metadata
Assignees
Labels
No labels