openstack/openstack-helm
Code Issues Proposed changes

Cinder-backup can request to be run as SYS_ADMIN capability.

Browse Source 
cinder-backup process should be able to run privsep daemon and
it required SYS_ADMIN capability.

Change-Id: Ife6fd3ae921078d64a63d15cee6b389ab26b8a4b
Closes-bug: 1718599
This commit is contained in:
Jaesang Lee 2017-09-21 16:53:22 +09:00
parent 9e117ce95b
commit db634694de
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cinder/templates/deployment-backup.yaml
View File

@ -68,6 +68,8 @@ spec:
{{ tuple $envAll $envAll.Values.pod.resources.backup | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
securityContext:
runAsUser: {{ .Values.pod.user.cinder.uid }}
capabilities:
add: ["SYS_ADMIN"]
command:
- /tmp/cinder-backup.sh
volumeMounts: