Merge pull request checkpoint-restore#3 from Parthiba-Hazra/manager

Update controller-manager to Allow Operator Access to Checkpoints
Parthiba-Hazra · Jun 7, 2024 · 4f69d8b · 4f69d8b
2 parents f79db27 + 7c7a925
commit 4f69d8b
Showing 1 changed file with 13 additions and 3 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -73,10 +73,12 @@ spec:
         image: controller:latest
         name: manager
         securityContext:
-          allowPrivilegeEscalation: false
+          runAsNonRoot: false
+          runAsUser: 0
+          allowPrivilegeEscalation: true
           capabilities:
-            drop:
-              - "ALL"
+            drop: ["ALL"]
+            add: ["DAC_OVERRIDE", "FOWNER"]
         livenessProbe:
           httpGet:
             path: /healthz
@@ -98,5 +100,13 @@ spec:
           requests:
             cpu: 10m
             memory: 64Mi
+        volumeMounts:
+        - name: kubelet-checkpoints
+          mountPath: /var/lib/kubelet/checkpoints
       serviceAccountName: controller-manager
       terminationGracePeriodSeconds: 10
+      volumes:
+      - name: kubelet-checkpoints
+        hostPath:
+          path: /var/lib/kubelet/checkpoints
+          type: Directory