Skip to content
Snippets Groups Projects
Commit 910bf426 authored by Derek Su's avatar Derek Su
Browse files

Revert "Run the container of the helper pod in privileged mode"


This reverts commit bd0bc312.

Signed-off-by: default avatarDerek Su <derek.su@suse.com>
parent 61e3b3cc
No related branches found
No related tags found
No related merge requests found
...@@ -567,7 +567,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string, ...@@ -567,7 +567,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
if o.Node != "" { if o.Node != "" {
helperPod.Spec.NodeName = o.Node helperPod.Spec.NodeName = o.Node
} }
privileged := true
helperPod.Spec.ServiceAccountName = p.serviceAccountName helperPod.Spec.ServiceAccountName = p.serviceAccountName
helperPod.Spec.RestartPolicy = v1.RestartPolicyNever helperPod.Spec.RestartPolicy = v1.RestartPolicyNever
helperPod.Spec.Tolerations = append(helperPod.Spec.Tolerations, lpvTolerations...) helperPod.Spec.Tolerations = append(helperPod.Spec.Tolerations, lpvTolerations...)
...@@ -578,9 +577,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string, ...@@ -578,9 +577,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
"-s", strconv.FormatInt(o.SizeInBytes, 10), "-s", strconv.FormatInt(o.SizeInBytes, 10),
"-m", string(o.Mode), "-m", string(o.Mode),
"-a", string(action)} "-a", string(action)}
helperPod.Spec.Containers[0].SecurityContext = &v1.SecurityContext{
Privileged: &privileged,
}
// If it already exists due to some previous errors, the pod will be cleaned up later automatically // If it already exists due to some previous errors, the pod will be cleaned up later automatically
// https://github.com/rancher/local-path-provisioner/issues/27 // https://github.com/rancher/local-path-provisioner/issues/27
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment