diff --git a/charts/spire/charts/spiffe-csi-driver/templates/scc-spiffe-csi-driver.yaml b/charts/spire/charts/spiffe-csi-driver/templates/scc-spiffe-csi-driver.yaml index 73ef6fa..5966697 100644 --- a/charts/spire/charts/spiffe-csi-driver/templates/scc-spiffe-csi-driver.yaml +++ b/charts/spire/charts/spiffe-csi-driver/templates/scc-spiffe-csi-driver.yaml @@ -16,6 +16,7 @@ volumes: - configmap - hostPath - secret +allowedCapabilities: null allowHostDirVolumePlugin: true allowHostIPC: false allowHostNetwork: false @@ -23,8 +24,11 @@ allowHostPID: false allowHostPorts: false allowPrivilegeEscalation: true allowPrivilegedContainer: true +defaultAddCapabilities: null fsGroup: type: RunAsAny groups: [] +priority: null +requiredDropCapabilities: null {{ end }} diff --git a/charts/spire/charts/spiffe-oidc-discovery-provider/templates/scc-spire-oidc-discovery-provider.yaml b/charts/spire/charts/spiffe-oidc-discovery-provider/templates/scc-spire-oidc-discovery-provider.yaml index abd9a73..6916687 100644 --- a/charts/spire/charts/spiffe-oidc-discovery-provider/templates/scc-spire-oidc-discovery-provider.yaml +++ b/charts/spire/charts/spiffe-oidc-discovery-provider/templates/scc-spire-oidc-discovery-provider.yaml @@ -22,6 +22,7 @@ volumes: - hostPath - projected - secret +allowedCapabilities: null allowHostDirVolumePlugin: true allowHostIPC: true allowHostNetwork: true @@ -29,9 +30,12 @@ allowHostPID: true allowHostPorts: true allowPrivilegeEscalation: true allowPrivilegedContainer: true +defaultAddCapabilities: null fsGroup: type: RunAsAny groups: [] +priority: null +requiredDropCapabilities: null seccompProfiles: - '*' diff --git a/charts/spire/charts/spire-agent/templates/scc-spire-agent.yaml b/charts/spire/charts/spire-agent/templates/scc-spire-agent.yaml index d43b4fe..30d84f1 100644 --- a/charts/spire/charts/spire-agent/templates/scc-spire-agent.yaml +++ b/charts/spire/charts/spire-agent/templates/scc-spire-agent.yaml @@ -18,6 +18,7 @@ volumes: - projected - secret - emptyDir +allowedCapabilities: null allowHostDirVolumePlugin: true allowHostIPC: true allowHostNetwork: true @@ -25,8 +26,11 @@ allowHostPID: true allowHostPorts: true allowPrivilegeEscalation: true allowPrivilegedContainer: true +defaultAddCapabilities: null fsGroup: type: RunAsAny groups: [] +priority: null +requiredDropCapabilities: null {{ end }}