feat: enable privileged mode for container

Signed-off-by: Dominik Rosiek <[email protected]>
SumoLogic · Sep 8, 2022 · 13248b6 · 13248b6
1 parent 2de3424
commit 13248b6
Show file tree

Hide file tree

Showing 6 changed files with 57 additions and 13 deletions.
diff --git a/operator/handler/handler.go b/operator/handler/handler.go
@@ -187,6 +187,8 @@ func (e PodExtender) extendPod(ctx context.Context, pod *corev1.Pod) error {
 					},
 				},
 			})
+
+		privileged := true
 
 		container := corev1.Container{
 			Image: e.TailingSidecarImage,
@@ -208,6 +210,9 @@ func (e PodExtender) extendPod(ctx context.Context, pod *corev1.Pod) error {
 					MountPath: hostPathMountPath,
 				},
 			},
+			SecurityContext: &corev1.SecurityContext{
+				Privileged: &privileged,
+			},
 		}
 		containers = append(containers, container)
 		sidecarsCount++

diff --git a/operator/handler/testdata/patch_update_1_tailing_sidecar.json b/operator/handler/testdata/patch_update_1_tailing_sidecar.json
@@ -25,7 +25,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar1"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {

diff --git a/operator/handler/testdata/patch_with_2_tailing_sidecars.json b/operator/handler/testdata/patch_with_2_tailing_sidecars.json
@@ -25,7 +25,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar0"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -54,7 +57,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar1"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {

diff --git a/operator/handler/testdata/patch_with_3_named_tailing_sidecars.json b/operator/handler/testdata/patch_with_3_named_tailing_sidecars.json
@@ -25,7 +25,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar0"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -54,7 +57,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar1"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -83,7 +89,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar2"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {

diff --git a/operator/handler/testdata/patch_with_3_tailing_sidecars.json b/operator/handler/testdata/patch_with_3_tailing_sidecars.json
@@ -58,7 +58,10 @@
                                         "mountPath": "/tailing-sidecar/var",
                                         "name": "volume-sidecar0"
                                 }
-                        ]
+                        ],
+                        "securityContext": {
+                                "privileged": true
+                        }
                 }
         },
         {
@@ -87,7 +90,10 @@
                                         "mountPath": "/tailing-sidecar/var",
                                         "name": "volume-sidecar1"
                                 }
-                        ]
+                        ],
+                        "securityContext": {
+                                "privileged": true
+                        }
                 }
         },
         {
@@ -116,7 +122,10 @@
                                         "mountPath": "/tailing-sidecar/var",
                                         "name": "volume-sidecar2"
                                 }
-                        ]
+                        ],
+                        "securityContext": {
+                                "privileged": true
+                        }
                 }
         }
 ]
diff --git a/operator/handler/testdata/patch_with_4_named_not_named_tailing_sidecars.json b/operator/handler/testdata/patch_with_4_named_not_named_tailing_sidecars.json
@@ -69,7 +69,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar0"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -98,7 +101,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar1"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -127,7 +133,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar2"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     },
     {
@@ -156,7 +165,10 @@
                     "mountPath": "/tailing-sidecar/var",
                     "name": "volume-sidecar3"
                 }
-            ]
+            ],
+            "securityContext": {
+                "privileged": true
+            }
         }
     }
 ]