helm: enable host network for openshift if needed
The securityContextConstraints require setting whether
host networking and host port access is needed by the
ceph cluster service accounts. The helm chart now allows
enabling this mode with the settings:
rook-ceph chart: useOperatorHostNetwork: true
rook-ceph-cluster chart: cephClusterSpec.network.provider: host
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 82262a8472)
This commit is contained in:
1 parent
e84f22af66
commit
227d6ee06b
2 files changed
+10
-4
No files matched your search
@@ -8,10 +8,13 @@ metadata:
|
||||
allowPrivilegedContainer: true
|
||||
allowHostDirVolumePlugin: true
|
||||
allowHostPID: false
|
||||
# set to true if running rook with host networking enabled
|
||||
{{- if eq .Values.cephClusterSpec.network.provider "host" }}
|
||||
allowHostNetwork: true
|
||||
allowHostPorts: true
|
||||
{{- else }}
|
||||
allowHostNetwork: false
|
||||
# set to true if running rook with the provider as host
|
||||
allowHostPorts: false
|
||||
{{- end }}
|
||||
priority:
|
||||
allowedCapabilities: ["MKNOD"]
|
||||
allowHostIPC: true
|
||||
|
||||
@@ -8,10 +8,13 @@ metadata:
|
||||
allowPrivilegedContainer: true
|
||||
allowHostDirVolumePlugin: true
|
||||
allowHostPID: false
|
||||
# set to true if running rook with host networking enabled
|
||||
{{- if .Values.useOperatorHostNetwork }}
|
||||
allowHostNetwork: true
|
||||
allowHostPorts: true
|
||||
{{- else }}
|
||||
allowHostNetwork: false
|
||||
# set to true if running rook with the provider as host
|
||||
allowHostPorts: false
|
||||
{{- end }}
|
||||
priority:
|
||||
allowedCapabilities: ["MKNOD"]
|
||||
allowHostIPC: true
|
||||
|
||||
Reference in new issue
Block a user