Skip to content

Capability SYS_ADMIN is published as removed in changelog, but is still in factory method #862

@mmerrill3

Description

@mmerrill3

Describe the bug
Capability SYS_ADMIN is published as removed in changelog, but is still in factory method. If the privilege is not necessary, remove this from the factory methods that create the daemonsets.

Environment
Daemonsets are using the SYS_ADMIN capability, but according the CHANGELOG, this was removed.

  • Trident version: v23.07.1

To Reproduce
Daemonsets are produced today with pods that require SYS_ADMIN privileges, which is too broad.

Expected behavior
Pods from the daemonset will not require SYS_ADMIN privileges.

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions