diff --git a/build/rbac/rbac.yaml b/build/rbac/rbac.yaml index ae76b78c39e5..ab502c7feedf 100644 --- a/build/rbac/rbac.yaml +++ b/build/rbac/rbac.yaml @@ -702,6 +702,7 @@ spec: allowedCapabilities: # required by CSI - SYS_ADMIN + - MKNOD fsGroup: rule: RunAsAny # runAsUser, supplementalGroups - Rook needs to run some pods as root diff --git a/deploy/charts/rook-ceph/templates/psp.yaml b/deploy/charts/rook-ceph/templates/psp.yaml index e609c5f53b53..f0924be50b29 100644 --- a/deploy/charts/rook-ceph/templates/psp.yaml +++ b/deploy/charts/rook-ceph/templates/psp.yaml @@ -21,6 +21,7 @@ spec: allowedCapabilities: # required by CSI - SYS_ADMIN + - MKNOD fsGroup: rule: RunAsAny # runAsUser, supplementalGroups - Rook needs to run some pods as root diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml index 6fae3544d47f..8f7977bb5cf3 100644 --- a/deploy/examples/common.yaml +++ b/deploy/examples/common.yaml @@ -718,6 +718,7 @@ spec: allowedCapabilities: # required by CSI - SYS_ADMIN + - MKNOD fsGroup: rule: RunAsAny # runAsUser, supplementalGroups - Rook needs to run some pods as root