Adding correct capabilities to container

Signed-off-by: Kristi <74095043+kndoni@users.noreply.github.com>
NVIDIA · Jun 11, 2024 · 1ab4cdb · 1ab4cdb
1 parent 458098e
commit 1ab4cdb
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/deployments/helm/nvidia-device-plugin/templates/daemonset-gfd.yml b/deployments/helm/nvidia-device-plugin/templates/daemonset-gfd.yml
@@ -97,7 +97,7 @@ spec:
           {{- toYaml . | nindent 10 }}
         {{- end }}
         securityContext:
-          {{- include "gpu-feature-discovery.securityContext" . | nindent 10 }}
+          {{- include "nvidia-device-plugin.securityContext" . | nindent 10 }}
       {{- end }}
       containers:
       {{- if $options.hasConfigMap }}
@@ -139,7 +139,7 @@ spec:
           {{- toYaml . | nindent 10 }}
         {{- end }}
         securityContext:
-          {{- include "gpu-feature-discovery.securityContext" . | nindent 10 }}
+          {{- include "nvidia-device-plugin.securityContext" . | nindent 10 }}
       {{- end }}
       - image: {{ include "nvidia-device-plugin.fullimage" . }}
         imagePullPolicy: {{ .Values.image.pullPolicy }}
@@ -185,7 +185,10 @@ spec:
           - name: GFD_MODE
             value: "{{ .Values.gfdMode }}"
         securityContext:
-          {{- include "gpu-feature-discovery.securityContext" . | nindent 10 }}
+          {{- include "nvidia-device-plugin.securityContext" . | nindent 10 }}
+          capabilities:
+            add:
+              - SYS_ADMIN
         volumeMounts:
           - name: output-dir
             mountPath: "/etc/kubernetes/node-feature-discovery/features.d"

diff --git a/deployments/helm/nvidia-device-plugin/templates/daemonset-mps-control-daemon.yml b/deployments/helm/nvidia-device-plugin/templates/daemonset-mps-control-daemon.yml
@@ -98,6 +98,8 @@ spec:
           value: ""
         - name: PROCESS_TO_SIGNAL
           value: ""
+        securityContext:
+          {{- include "nvidia-device-plugin.securityContext" . | nindent 10 }}
         volumeMounts:
           - name: available-configs
             mountPath: /available-configs
@@ -139,6 +141,8 @@ spec:
             value: "1"
           - name: PROCESS_TO_SIGNAL
             value: "/usr/bin/mps-control-daemon"
+          securityContext:
+            {{- include "nvidia-device-plugin.securityContext" . | nindent 10 }}
           volumeMounts:
             - name: available-configs
               mountPath: /available-configs