Extend functionality of Test Mode to enable privileged mode for Segme…

…nt Store containers pravega#507
leapsky · Feb 16, 2021 · 70c08ea · 70c08ea
1 parent 2daf478
commit 70c08ea
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/pkg/controller/config/config.go b/pkg/controller/config/config.go
@@ -14,4 +14,5 @@ package config
 // the following changes:
 // - Disables Pravega Controller minimum number of replicas
 // - Disables Segment Store minimum number of replicas
+// - Enable privilidged mode for Segment Store containters
 var TestMode bool
diff --git a/pkg/controller/pravega/pravega_segmentstore.go b/pkg/controller/pravega/pravega_segmentstore.go
@@ -17,6 +17,7 @@ import (
 
 	api "github.com/pravega/pravega-operator/pkg/apis/pravega/v1beta1"
 	"github.com/pravega/pravega-operator/pkg/util"
+	"github.com/pravega/pravega-operator/pkg/controller/config"
 	appsv1 "k8s.io/api/apps/v1"
 	corev1 "k8s.io/api/core/v1"
 	policyv1beta1 "k8s.io/api/policy/v1beta1"
@@ -149,6 +150,9 @@ func makeSegmentstorePodSpec(p *api.PravegaCluster) corev1.PodSpec {
 					PeriodSeconds:       15,
 					FailureThreshold:    4,
 				},
+				SecurityContext: &corev1.SecurityContext{
+					Privileged: &config.TestMode,
+				},
 			},
 		},
 		Affinity: p.Spec.Pravega.SegmentStorePodAffinity,