Run sidecars for csi-mock as privileged

The driver and provisioner runs as privileged, so make all the other
sidecar containers privileged too.

This helps on system with SELinux, non-privileged container can't access
socket of a privileged one.
This commit is contained in:
Jan Safranek 2019-06-27 13:39:14 +02:00
parent 376a2cb344
commit d6077c717d
3 changed files with 6 additions and 0 deletions

View File

@ -24,6 +24,8 @@ spec:
- name: ADDRESS
value: /csi/csi.sock
imagePullPolicy: Always
securityContext:
privileged: true
volumeMounts:
- mountPath: /csi
name: socket-dir

View File

@ -23,6 +23,8 @@ spec:
- name: ADDRESS
value: /csi/csi.sock
imagePullPolicy: Always
securityContext:
privileged: true
volumeMounts:
- mountPath: /csi
name: socket-dir

View File

@ -23,6 +23,8 @@ spec:
- name: ADDRESS
value: /csi/csi.sock
imagePullPolicy: Always
securityContext:
privileged: true
volumeMounts:
- mountPath: /csi
name: socket-dir