util: setting RequiredDropCapabilities to ALL for rook-ceph-csi scc

This commit sets the RequiredDropCapabilities of rook-ceph-csi to "ALL". Signed-off-by: ShravaniVangur <shravanivangur@gmail.com>
ceph · Aug 14, 2024 · 3f5bbb9 · 3f5bbb9
1 parent fb9403e
commit 3f5bbb9
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/api/deploy/ocp/scc.yaml b/api/deploy/ocp/scc.yaml
@@ -20,6 +20,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:

diff --git a/deploy/scc.yaml b/deploy/scc.yaml
@@ -27,6 +27,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:

diff --git a/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml b/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml