We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6fd2fcf commit 298af63Copy full SHA for 298af63
charts/spdk-csi/latest/spdk-csi/templates/node.yaml
@@ -73,10 +73,10 @@ spec:
73
mountPath: /registration
74
- name: csi-node
75
securityContext:
76
- privileged: true
77
- capabilities:
78
- add: ["SYS_ADMIN", "SYS_MODULE"]
79
- allowPrivilegeEscalation: true
+ privileged: true # Needs to run as root user to access kubelet plugins folder and to load kernel modules
+ runAsUser: 0
+ runAsGroup: 0
+ readOnlyRootFilesystem: true
80
image: "{{ .Values.image.csi.repository }}:{{ .Values.image.csi.tag }}"
81
imagePullPolicy: {{ .Values.image.csi.pullPolicy }}
82
args:
0 commit comments