helm: update rook-ceph SecurityContextConstraints to match operator-openshift.yaml example

The rook-ceph SecurityContextConstraints in the rook-ceph helm chart does not include all the users necessary for a successful deployment. Specifically, rook-ceph-default, rook-ceph-mgr, rook-ceph-osd, and rook-ceph-rgw are listed in the operator-openshift.yaml example file (https://github.com/rook/rook/blob/master/deploy/examples/operator-openshift.yaml) but are not included in the helm chart. This commit adds these users.

Signed-off-by: Mason Buchanan <masonwb@gmail.com>
This commit is contained in:
Mason
2025-07-21 01:17:14 -04:00
committed by Mason Buchanan
parent e4da184ce3
commit a030d2ceb3
@@ -38,6 +38,10 @@ volumes:
users:
# A user needs to be added for each rook service account.
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-system
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-default
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-mgr
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-osd
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-rgw
---
# scc for the CSI driver
kind: SecurityContextConstraints