Skip to content

Allow node-feature-discovery-worker to use priv. PSP

Mac Chaffeerequested to merge
mac-chaffee/gpu-operator:add-nfd-rbac into master

Related to our discussion in !412 (merged) and in https://github.com/NVIDIA/gpu-operator/issues/314 , turns out that adding a ServiceAccount to the node-feature-discovery-worker DaemonSet only halfway fixed the issue with PodSecurityPolicies. That newly-added ServiceAccount still needs permission to use the privileged PodSecurityPolicy since it uses hostPath mounts.

This PR grants that permission, hopefully finally fixing that github issue linked above :)

Merge request reports