Skip to content

Commit eb79872

Browse files
authored
Update MinIo pod privileges to run on ocp 4.19 (#277)
* fix: add securityContext for minio pod * fix: minio on 4.19
1 parent daf13fb commit eb79872

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

tests/conftest.py

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -440,6 +440,12 @@ def minio_pod(
440440
],
441441
"image": request.param.get("image"),
442442
"name": MinIo.Metadata.NAME,
443+
"securityContext": {
444+
"allowPrivilegeEscalation": False,
445+
"capabilities": {"drop": ["ALL"]},
446+
"runAsNonRoot": True,
447+
"seccompProfile": {"type": "RuntimeDefault"},
448+
},
443449
}
444450
],
445451
label=pod_labels,
@@ -465,6 +471,7 @@ def minio_service(admin_client: DynamicClient, minio_namespace: Namespace) -> Ge
465471
selector={
466472
Labels.Openshift.APP: MinIo.Metadata.NAME,
467473
},
474+
session_affinity="ClientIP",
468475
) as minio_service:
469476
yield minio_service
470477

0 commit comments

Comments
 (0)