feedc0de/my-rook-config
1
0 Fork 0
forked from rook/rook
Code Pull Requests Activity

helm: update rook-ceph SecurityContextConstraints to match operator-openshift.yaml example

Browse Source 
The rook-ceph SecurityContextConstraints in the rook-ceph helm chart does not include all the users necessary for a successful deployment. Specifically, rook-ceph-default, rook-ceph-mgr, rook-ceph-osd, and rook-ceph-rgw are listed in the operator-openshift.yaml example file (https://github.com/rook/rook/blob/master/deploy/examples/operator-openshift.yaml) but are not included in the helm chart. This commit adds these users.

Signed-off-by: Mason Buchanan <masonwb@gmail.com>
(cherry picked from commit a030d2ceb3)
This commit is contained in:
Mason authored and Mergify committed 2025-07-21 17:37:34 +00:00
1 parent 6ced439790
commit a29b12469d
1 file changed
+4
Download Patch File Download Diff File Expand all files Collapse all files
deploy/charts/rook-ceph/templates/securityContextConstraints.yaml
+4
View File
@@ -38,6 +38,10 @@ volumes:
users:
# A user needs to be added for each rook service account.
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-system
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-default
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-mgr
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-osd
- system:serviceaccount:{{ .Release.Namespace }}:rook-ceph-rgw
---
# scc for the CSI driver
kind: SecurityContextConstraints