Skip to content
Snippets Groups Projects
Commit be0a10a4 authored by Derek Su's avatar Derek Su
Browse files

Revert "Run the container of the helper pod in privileged mode"


This reverts commit bd0bc312.

Signed-off-by: default avatarDerek Su <derek.su@suse.com>
parent 502c7785
No related branches found
No related tags found
No related merge requests found
......@@ -567,7 +567,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
if o.Node != "" {
helperPod.Spec.NodeName = o.Node
}
privileged := true
helperPod.Spec.ServiceAccountName = p.serviceAccountName
helperPod.Spec.RestartPolicy = v1.RestartPolicyNever
helperPod.Spec.Tolerations = append(helperPod.Spec.Tolerations, lpvTolerations...)
......@@ -578,9 +577,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
"-s", strconv.FormatInt(o.SizeInBytes, 10),
"-m", string(o.Mode),
"-a", string(action)}
helperPod.Spec.Containers[0].SecurityContext = &v1.SecurityContext{
Privileged: &privileged,
}
// If it already exists due to some previous errors, the pod will be cleaned up later automatically
// https://github.com/rancher/local-path-provisioner/issues/27
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment