Skip to content

Commit f8c8f22

Browse files
committed
remove unnecessary volumes from pluginConfig
also set privileged false for the pod
1 parent a2f6430 commit f8c8f22

File tree

1 file changed

+1
-19
lines changed

1 file changed

+1
-19
lines changed

Diff for: pkg/securityscan/core/templates/pluginConfig.template

+1-19
Original file line numberDiff line numberDiff line change
@@ -29,15 +29,6 @@ data:
2929
key: CriticalAddonsOnly
3030
operator: Exists
3131
volumes:
32-
- hostPath:
33-
path: /
34-
name: root
35-
- hostPath:
36-
path: /etc/passwd
37-
name: etc-passwd
38-
- hostPath:
39-
path: /etc/group
40-
name: etc-group
4132
- hostPath:
4233
path: /var/lib/rancher
4334
name: var-rancher
@@ -106,20 +97,11 @@ data:
10697
{{- end }}
10798
imagePullPolicy: IfNotPresent
10899
securityContext:
109-
privileged: true
100+
privileged: false
110101
volumeMounts:
111102
- mountPath: /tmp/results
112103
name: results
113104
readOnly: false
114-
- mountPath: /node
115-
name: root
116-
readOnly: true
117-
- mountPath: /etc/passwd
118-
name: etc-passwd
119-
readOnly: true
120-
- mountPath: /etc/group
121-
name: etc-group
122-
readOnly: true
123105
- mountPath: /var/lib/rancher
124106
name: var-rancher
125107
readOnly: true

0 commit comments

Comments
 (0)