From a030d2ceb3680a7b6dd780f55a1bcc54753e35d5 Mon Sep 17 00:00:00 2001 From: Mason Date: Fri, 18 Jul 2025 23:24:33 -0400 Subject: [PATCH] helm: update rook-ceph SecurityContextConstraints to match operator-openshift.yaml example The rook-ceph SecurityContextConstraints in the rook-ceph helm chart does not include all the users necessary for a successful deployment. Specifically, rook-ceph-default, rook-ceph-mgr, rook-ceph-osd, and rook-ceph-rgw are listed in the operator-openshift.yaml example file (https://github.com/rook/rook/blob/master/deploy/examples/operator-openshift.yaml) but are not included in the helm chart. This commit adds these users. Signed-off-by: Mason Buchanan --- .../rook-ceph/templates/securityContextConstraints.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deploy/charts/rook-ceph/templates/securityContextConstraints.yaml b/deploy/charts/rook-ceph/templates/securityContextConstraints.yaml index 23664fd93..44451e851 100644 --- a/deploy/charts/rook-ceph/templates/securityContextConstraints.yaml +++ b/deploy/charts/rook-ceph/templates/securityContextConstraints.yaml @@ -38,6 +38,10 @@ volumes: users: # A user needs to be added for each rook service account. - system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-system + - system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-default + - system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-mgr + - system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-osd + - system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-rgw --- # scc for the CSI driver kind: SecurityContextConstraints