What did you do? (required. The issue will be closed when not provided.)
I start learning CSI recently. The csi-digitalocean is a pretty good resource for beginners. After study it for a while, I find a question about the privileged in this CSI driver deployment and would like ask for your helps.
When I checked the example in here,
|
privileged: true |
|
capabilities: |
|
add: ["SYS_ADMIN"] |
I found that it includes both
privileged and
CAP_SYS_ADMIN.
Doesn't privileged include CAP_SYS_ADMIN? Is there any reason to include both?
Thanks in advance.
What did you do? (required. The issue will be closed when not provided.)
I start learning CSI recently. The csi-digitalocean is a pretty good resource for beginners. After study it for a while, I find a question about the
privilegedin this CSI driver deployment and would like ask for your helps.When I checked the example in here,
csi-digitalocean/deploy/kubernetes/releases/csi-digitalocean-v2.0.0/driver.yaml
Lines 383 to 385 in a1288db
privilegedandCAP_SYS_ADMIN.Doesn't
privilegedincludeCAP_SYS_ADMIN? Is there any reason to include both?Thanks in advance.