From 584b3bd32871de60e67ee3e49d2cebba2d3c95a4 Mon Sep 17 00:00:00 2001 From: Santosh Pillai Date: Mon, 8 Nov 2021 14:19:26 +0530 Subject: [PATCH] core: add `AllowHostDirVolumePlugin: true` to SCC Adds AllowHostDirVolumePlugin to the go representation of the rook-ceph SCC for using the hostPath. Also making it consistent with the yaml representation. From Openshift docs For backwards compatibility, the usage of allowHostDirVolumePlugin overrides settings in the volumes field. For example, if allowHostDirVolumePlugin is set to false but allowed in the volumes field, then the hostPath value will be removed from volumes. Signed-off-by: Santosh Pillai --- pkg/apis/ceph.rook.io/v1/scc.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/apis/ceph.rook.io/v1/scc.go b/pkg/apis/ceph.rook.io/v1/scc.go index 5f9ee1062..cde7af6cc 100644 --- a/pkg/apis/ceph.rook.io/v1/scc.go +++ b/pkg/apis/ceph.rook.io/v1/scc.go @@ -38,6 +38,7 @@ func NewSecurityContextConstraints(name, namespace string) *secv1.SecurityContex Namespace: namespace, }, AllowPrivilegedContainer: true, + AllowHostDirVolumePlugin: true, ReadOnlyRootFilesystem: false, AllowHostIPC: true, AllowHostNetwork: false,