Init job for updater DaemonSet needs to run privileged (#6)

mittwald · Oct 20, 2020 · 7fb4750 · 7fb4750
1 parent dde321c
commit 7fb4750
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/controller/updater/controller.go b/pkg/controller/updater/controller.go
@@ -107,6 +107,8 @@ func (u *UpdaterController) reconcile(ctx context.Context) (reconcile.Result, er
 		return reconcile.Result{}, err
 	}
 
+	t := true
+
 	i := corev1.Container{
 		Name:    "chown",
 		Image:   "busybox",
@@ -115,6 +117,9 @@ func (u *UpdaterController) reconcile(ctx context.Context) (reconcile.Result, er
 			Name:      "clamdb",
 			MountPath: "/var/lib/clamav",
 		}},
+		SecurityContext: &corev1.SecurityContext{
+			Privileged: &t,
+		},
 	}
 
 	c := corev1.Container{}