NetApp / trident

Storage orchestrator for containers
Apache License 2.0
732 stars 218 forks source link

Capability SYS_ADMIN is published as removed in changelog, but is still in factory method #862

Open mmerrill3 opened 8 months ago

mmerrill3 commented 8 months ago

Describe the bug Capability SYS_ADMIN is published as removed in changelog, but is still in factory method. If the privilege is not necessary, remove this from the factory methods that create the daemonsets.

Environment Daemonsets are using the SYS_ADMIN capability, but according the CHANGELOG, this was removed.

To Reproduce Daemonsets are produced today with pods that require SYS_ADMIN privileges, which is too broad.

Expected behavior Pods from the daemonset will not require SYS_ADMIN privileges.

Additional context Add any other context about the problem here.