deploy: setting RequiredDropCapabilities to ALL for ceph-csi scc

This commit sets the RequiredDropCapabilities of ceph-csi to "ALL". Signed-off-by: ShravaniVangur <[email protected]>
ceph · Aug 15, 2024 · 0eabe32 · 0eabe32
1 parent b0751cb
commit 0eabe32
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/api/deploy/ocp/scc.yaml b/api/deploy/ocp/scc.yaml
@@ -20,6 +20,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:

diff --git a/deploy/scc.yaml b/deploy/scc.yaml
@@ -27,6 +27,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:

diff --git a/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml b/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml