allow registrar to write to /csi/csi.sock

IBM · Dec 7, 2020 · 145f224 · 145f224
1 parent 07dabe4
commit 145f224
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/controller/ibmblockcsi/syncer/csi_node.go b/pkg/controller/ibmblockcsi/syncer/csi_node.go
@@ -173,7 +173,7 @@ func (s *csiNodeSyncer) ensureContainersSpec() []corev1.Container {
 		Privileged:               boolptr.False(),
 		RunAsUser:                &nonRootUserID,
 		RunAsNonRoot:             boolptr.True(),
-		ReadOnlyRootFilesystem:   boolptr.True(),
+		ReadOnlyRootFilesystem:   boolptr.False(),
 		AllowPrivilegeEscalation: boolptr.False(),
 	}
 	fillSecurityContextCapabilities(registrar.SecurityContext)