Merge pull request #9439 from y1r/add-cap-mknod-to-psp

osd: add CAP_MKNOD to PSP
rook · Dec 16, 2021 · 517aff4 · 517aff4
2 parents b7a145e + bae6351
commit 517aff4
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/build/rbac/rbac.yaml b/build/rbac/rbac.yaml
@@ -702,6 +702,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root

diff --git a/deploy/charts/rook-ceph/templates/psp.yaml b/deploy/charts/rook-ceph/templates/psp.yaml
@@ -21,6 +21,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root

diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml
@@ -718,6 +718,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root