Merge pull request #9449 from rook/mergify/bp/release-1.8/pr-9439

osd: add CAP_MKNOD to PSP (backport #9439)
rook · Dec 16, 2021 · bd403a8 · bd403a8
2 parents 7b9c691 + 0d3462b
commit bd403a8
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/build/rbac/rbac.yaml b/build/rbac/rbac.yaml
@@ -702,6 +702,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root

diff --git a/deploy/charts/rook-ceph/templates/psp.yaml b/deploy/charts/rook-ceph/templates/psp.yaml
@@ -21,6 +21,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root

diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml
@@ -718,6 +718,7 @@ spec:
   allowedCapabilities:
     # required by CSI
     - SYS_ADMIN
+    - MKNOD
   fsGroup:
     rule: RunAsAny
   # runAsUser, supplementalGroups - Rook needs to run some pods as root