Skip to content

[Question] privileged vs SYS_ADMIN in the CSI driver deployment #378

@lemonlatte

Description

@lemonlatte

What did you do? (required. The issue will be closed when not provided.)

I start learning CSI recently. The csi-digitalocean is a pretty good resource for beginners. After study it for a while, I find a question about the privileged in this CSI driver deployment and would like ask for your helps.

When I checked the example in here,

privileged: true
capabilities:
add: ["SYS_ADMIN"]
I found that it includes both privileged and CAP_SYS_ADMIN.

Doesn't privileged include CAP_SYS_ADMIN? Is there any reason to include both?

Thanks in advance.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions