diff --git a/ceph-provisioners/Chart.yaml b/ceph-provisioners/Chart.yaml index 8c285157b..c80d16e9e 100644 --- a/ceph-provisioners/Chart.yaml +++ b/ceph-provisioners/Chart.yaml @@ -15,6 +15,6 @@ apiVersion: v1 appVersion: v1.0.0 description: OpenStack-Helm Ceph Provisioner name: ceph-provisioners -version: 0.1.10 +version: 0.1.11 home: https://github.com/ceph/ceph ... diff --git a/ceph-provisioners/values.yaml b/ceph-provisioners/values.yaml index f8d33810c..b4ab0a9d2 100644 --- a/ceph-provisioners/values.yaml +++ b/ceph-provisioners/values.yaml @@ -86,11 +86,14 @@ pod: allowPrivilegeEscalation: false readOnlyRootFilesystem: true ceph_rbd_snapshotter: - privileged: true + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true ceph_rbd_attacher: - privileged: true + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true ceph_rbd_resizer: - privileged: true + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true ceph_rbd_cephcsi: privileged: true capabilities: diff --git a/releasenotes/notes/ceph-provisioners.yaml b/releasenotes/notes/ceph-provisioners.yaml index 39ce28801..005195876 100644 --- a/releasenotes/notes/ceph-provisioners.yaml +++ b/releasenotes/notes/ceph-provisioners.yaml @@ -9,5 +9,6 @@ ceph-provisioners: - 0.1.6 Update ceph_mon config as per new ceph clients - 0.1.7 Use full image ref for docker official images - 0.1.8 Enable Ceph CSI Provisioner to Stand Alone - - 0.1.10 Add check for empty ceph endpoint + - 0.1.10 Add check for empty ceph endpoint + - 0.1.11 Limit Ceph Provisioner Container Security Contexts ...