Skip to content

Commit 910bf42

Browse files
committed
Revert "Run the container of the helper pod in privileged mode"
This reverts commit bd0bc31. Signed-off-by: Derek Su <derek.su@suse.com>
1 parent 61e3b3c commit 910bf42

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

provisioner.go

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -567,7 +567,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
567567
if o.Node != "" {
568568
helperPod.Spec.NodeName = o.Node
569569
}
570-
privileged := true
571570
helperPod.Spec.ServiceAccountName = p.serviceAccountName
572571
helperPod.Spec.RestartPolicy = v1.RestartPolicyNever
573572
helperPod.Spec.Tolerations = append(helperPod.Spec.Tolerations, lpvTolerations...)
@@ -578,9 +577,6 @@ func (p *LocalPathProvisioner) createHelperPod(action ActionType, cmd []string,
578577
"-s", strconv.FormatInt(o.SizeInBytes, 10),
579578
"-m", string(o.Mode),
580579
"-a", string(action)}
581-
helperPod.Spec.Containers[0].SecurityContext = &v1.SecurityContext{
582-
Privileged: &privileged,
583-
}
584580

585581
// If it already exists due to some previous errors, the pod will be cleaned up later automatically
586582
// https://github.com/rancher/local-path-provisioner/issues/27

0 commit comments

Comments
 (0)