We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent aa0023b commit df509ebCopy full SHA for df509eb
charts/spdk-csi/latest/spdk-csi/templates/node.yaml
@@ -71,10 +71,15 @@ spec:
71
mountPath: /registration
72
- name: csi-node
73
securityContext:
74
- privileged: true
+ runAsUser: 0
75
+ runAsGroup: 0
76
+ allowPrivilegeEscalation: false
77
capabilities:
78
+ drop: ["ALL"]
79
add: ["SYS_ADMIN", "SYS_MODULE"]
- allowPrivilegeEscalation: true
80
+ readOnlyRootFilesystem: true
81
+ seccompProfile:
82
+ type: RuntimeDefault
83
image: "{{ .Values.image.csi.repository }}:{{ .Values.image.csi.tag }}"
84
imagePullPolicy: {{ .Values.image.csi.pullPolicy }}
85
args:
0 commit comments