NetApp / trident

Storage orchestrator for containers
Apache License 2.0
756 stars 219 forks source link

K8S PSP getting created after setting excludePodSecurityPolicy to true #819

Open KuldeepSharmaTR opened 1 year ago

KuldeepSharmaTR commented 1 year ago

Describe the bug A clear and concise description of what the bug is.

Environment Provide accurate information about the environment to help us reproduce the issue.

To Reproduce Steps to reproduce the behavior: Deploy trident-operator helm chart with excludePodSecurityPolicy: true

Expected behavior No PodSecurityPolicy should be created for trident.

Additional context trident-controller and trident-node-linux PSPs are getting created even after setting excludePodSecurityPolicy to true.

Xavier-0965 commented 1 year ago

The same problem occures with Trident version 23.04 on openshift 4.11.33 (with kubernetes 1.24)

$ oc get psp
Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+
NAME                 PRIV    CAPS   SELINUX    RUNASUSER   FSGROUP    SUPGROUP   READONLYROOTFS   VOLUMES
trident-controller   false          RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,projected,emptyDir
trident-node-linux   true           RunAsAny   RunAsAny    RunAsAny   RunAsAny   false            hostPath,projected,emptyDir