Added volumetypes to PSP to prevent issue spinning pods as described …

…at: giantswarm/roadmap#259 (comment).
giantswarm · Feb 28, 2023 · 91ca540 · 91ca540
1 parent ce6418f
commit 91ca540
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -15,6 +15,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Use of default/runtime seccomp profile.
 
+### Changed
+
+- Added extra volumetypes to PSP to prevent pods being blocked from running after adding seccompannotation.
+
 ## [0.5.5] - 2023-02-08
 
 ### Changed

diff --git a/helm/dns-operator-aws/templates/psp.yaml b/helm/dns-operator-aws/templates/psp.yaml
@@ -25,6 +25,13 @@ spec:
  rule: RunAsAny
  supplementalGroups:
  rule: RunAsAny
+ volumes:
+ - emptyDir
+ - secret
+ - downwardAPI
+ - configMap
+ - persistentVolumeClaim
+ - projected
  allowPrivilegeEscalation: false
  hostNetwork: false
  hostIPC: false