PWX-32497: fix portworx privileged SCC (#1164)

* re-enabling the AllowHostPorts, since telemetry uses it Signed-off-by: Zoran Rajic <zox@portworx.com>
libopenstorage · Jul 25, 2023 · f01d234 · f01d234
1 parent af4ccf7
commit f01d234
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/drivers/storage/portworx/component/securitycontextconstraints.go b/drivers/storage/portworx/component/securitycontextconstraints.go
@@ -194,7 +194,7 @@ func (s *scc) getSCCs(cluster *opcorev1.StorageCluster) []ocp_secv1.SecurityCont
 			AllowHostIPC:             false,
 			AllowHostNetwork:         true,
 			AllowHostPID:             false,
-			AllowHostPorts:           false,
+			AllowHostPorts:           true,
 			AllowPrivilegeEscalation: boolPtr(true),
 			AllowPrivilegedContainer: true,
 			AllowedUnsafeSysctls:     []string{"*"},

diff --git a/drivers/storage/portworx/testspec/portworxSCC.yaml b/drivers/storage/portworx/testspec/portworxSCC.yaml
@@ -2,7 +2,7 @@ allowHostDirVolumePlugin: true
 allowHostIPC: false
 allowHostNetwork: true
 allowHostPID: false
-allowHostPorts: false
+allowHostPorts: true
 allowPrivilegeEscalation: true
 allowPrivilegedContainer: true
 allowedCapabilities: