From a6bc27b578ca8037bbebbdf7f267e29a0a854db2 Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Fri, 11 Mar 2022 11:40:04 +0200 Subject: [PATCH] iaa: fix deployment with kustomize Signed-off-by: Mikko Ylinen --- deployments/iaa_plugin/base/intel-iaa-plugin.yaml | 1 + deployments/iaa_plugin/base/kustomization.yaml | 2 ++ deployments/iaa_plugin/kustomization.yaml | 2 ++ 3 files changed, 5 insertions(+) create mode 100644 deployments/iaa_plugin/base/kustomization.yaml create mode 100644 deployments/iaa_plugin/kustomization.yaml diff --git a/deployments/iaa_plugin/base/intel-iaa-plugin.yaml b/deployments/iaa_plugin/base/intel-iaa-plugin.yaml index 7c986753..95dcc696 100644 --- a/deployments/iaa_plugin/base/intel-iaa-plugin.yaml +++ b/deployments/iaa_plugin/base/intel-iaa-plugin.yaml @@ -24,6 +24,7 @@ spec: imagePullPolicy: IfNotPresent securityContext: readOnlyRootFilesystem: true + allowPrivilegeEscalation: false volumeMounts: - name: devfs mountPath: /dev/iax diff --git a/deployments/iaa_plugin/base/kustomization.yaml b/deployments/iaa_plugin/base/kustomization.yaml new file mode 100644 index 00000000..e3e86081 --- /dev/null +++ b/deployments/iaa_plugin/base/kustomization.yaml @@ -0,0 +1,2 @@ +resources: + - intel-iaa-plugin.yaml diff --git a/deployments/iaa_plugin/kustomization.yaml b/deployments/iaa_plugin/kustomization.yaml new file mode 100644 index 00000000..f191f3aa --- /dev/null +++ b/deployments/iaa_plugin/kustomization.yaml @@ -0,0 +1,2 @@ +bases: + - base