Oded Viner f8c1c99cb4 nvmeof: add sys_admin to scc allowedcapabilities for gateway pods ...

the nvmeof gateway requires privileged containers with
sys_admin capability. the rook-ceph scc only allowed mknod,
causing pod creation to fail on openshift with:
"unable to validate against any security context constraint"

add sys_admin to allowedcapabilities in the helm chart sccs
and the go scc helper. this does not affect other daemons
(osd, rgw, mgr, mon) since they do not request sys_admin.

the operator-openshift.yaml example already includes
sys_admin, so this aligns the helm charts to match.

Signed-off-by: Oded Viner <oviner@redhat.com>

2026-05-11 13:47:12 +03:00

..

charts

nvmeof: add sys_admin to scc allowedcapabilities for gateway pods

2026-05-11 13:47:12 +03:00

examples

rgw: add option for tls and cipher in objectstore

2026-05-06 21:02:30 +05:30

olm/assemble

build: remove csv related files

2024-03-11 21:01:53 +05:30