deploy: setting RequiredDropCapabilities to ALL for ceph-csi scc

ShravaniVangur · mergify[bot] · commit 0eabe32b7634 · 2024-08-15T12:00:02.000Z
This commit sets the RequiredDropCapabilities of ceph-csi to "ALL".

Signed-off-by: ShravaniVangur &lt;shravanivangur@gmail.com&gt;
diff --git a/api/deploy/ocp/scc.yaml b/api/deploy/ocp/scc.yaml
@@ -20,6 +20,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:
diff --git a/deploy/scc.yaml b/deploy/scc.yaml
@@ -27,6 +27,8 @@ allowHostPID: true
 allowHostIPC: true
 # Set to false as we write to RootFilesystem inside csi containers
 readOnlyRootFilesystem: false
+requiredDropCapabilities:
+  - ALL
 runAsUser:
   type: RunAsAny
 seLinuxContext:
diff --git a/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml b/vendor/github.com/ceph/ceph-csi/api/deploy/ocp/scc.yaml
