Run the controller in non-privileged mode

[mauriciopoppe]

I saw these lines in the controller deployment

aws-efs-csi-driver/deploy/kubernetes/base/controller-deployment.yaml

Lines 36 to 37 in e914558

	securityContext:
	privileged: true

Does it need to run as privileged? From my understanding the node plugin is the one that might be doing format/mount which are privileged storage operations but the controller would only be making cloud requests. Could we remove it safely?

[EshamAaqib]

I have the same question

[mskanth972]

Hi @mauriciopoppe, thanks for bringing here. Yes, it does not need to run as privileged, will raise a PR and mark in the next release.

[mskanth972]

The latest version 1.5.8 has the updated the security context.
https://github.com/kubernetes-sigs/aws-efs-csi-driver/blob/master/CHANGELOG-1.x.md#v158

[mskanth972]

/close
#1055

[k8s-ci-robot]

@mskanth972: Closing this issue.

In response to this:

/close
#1055

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.