-
Notifications
You must be signed in to change notification settings - Fork 55
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for Kubernetes Pod Security Policy #71
Labels
enhancement
New feature or request
Comments
do you have more details? How can I solve this issue? |
Here what we did:
for the purpose of this issue case, you probably want to make this as an optional parameter like "psp.enabled=true" and "serviceaccount.create=true". |
hi @mchuegeh, we are now moving to https://github.com/kubernetes-csi/csi-driver-smb, do you have time contributing to this project? thanks. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Is your feature request related to a problem?/Why is this needed
We run secure Kubernetes 1.16+ environments where Pod Security Policies (PSP) is required for any Pod to start. When we deploy the helm package for the SMB FlexVolume plugin it fails to start
Describe the solution you'd like in detail
The helm package includes PSP support, including creating the service account under which the installer pod runs as.
Describe alternatives you've considered
Manually create the required Kubernetes definitions to support PSP, including post-installation change to the installer's deployment - however it's more effective to have that supported out of the box.
Additional context
See https://kubernetes.io/docs/concepts/policy/pod-security-policy/
The text was updated successfully, but these errors were encountered: