utkuozdemir / pv-migrate

CLI tool to easily migrate Kubernetes persistent volumes
Apache License 2.0
1.62k stars 82 forks source link

Run as non root without SYS_CHROOT capabilities #308

Open sathishkumar-p opened 3 months ago

sathishkumar-p commented 3 months ago

**Is your feature request related to a problem? Not all clusters will have root permission to migrate the PVC. It would be great if pv migrate could run as nonroot without SYS_CHROOT capabilities.

Describe the solution you'd like Provide possibility to run as non root

Issue: error="failed to install on source: failed to install helm chart: 1 error occurred:\n\t* deployments.apps \"pv-migrate-bdddc-src-sshd\" is forbidden: ValidatingAdmissionPolicy 'dhc-deny-capabilities-deploy' with binding 'dhc-deny-capabilities-deploy' denied request: Workload has one or more containers with not allowed capabilities!\n\n"