remove root worker pods

Signed-off-by: Michael Henriksen <[email protected]>
kubevirt · Aug 25, 2022 · 0298d15 · 0298d15
1 parent f2b5654
commit 0298d15
Show file tree

Hide file tree

Showing 6 changed files with 3 additions and 20 deletions.
diff --git a/pkg/controller/clone-controller.go b/pkg/controller/clone-controller.go
@@ -593,7 +593,6 @@ func MakeCloneSourcePodSpec(sourceVolumeMode corev1.PersistentVolumeMode, image,
 		},
 		Spec: corev1.PodSpec{
 			SecurityContext: &corev1.PodSecurityContext{
-				RunAsUser: &[]int64{0}[0],
 				SELinuxOptions: &corev1.SELinuxOptions{
 					User:  "system_u",
 					Role:  "system_r",

diff --git a/pkg/controller/clone-controller_test.go b/pkg/controller/clone-controller_test.go
@@ -840,9 +840,6 @@ func createSourcePod(pvc *corev1.PersistentVolumeClaim, pvcUID string) *corev1.P
 			},
 		},
 		Spec: corev1.PodSpec{
-			SecurityContext: &corev1.PodSecurityContext{
-				RunAsUser: &[]int64{0}[0],
-			},
 			Containers: []corev1.Container{
 				{
 					Name:            common.ClonerSourcePodName,
@@ -929,9 +926,6 @@ func createSourcePod(pvc *corev1.PersistentVolumeClaim, pvcUID string) *corev1.P
 				Value: common.WriteBlockPath,
 			},
 		}
-		pod.Spec.SecurityContext = &corev1.PodSecurityContext{
-			RunAsUser: &[]int64{0}[0],
-		}
 	} else {
 		pod.Spec.Containers[0].VolumeMounts = []corev1.VolumeMount{
 			{

diff --git a/pkg/controller/import-controller.go b/pkg/controller/import-controller.go
@@ -1247,9 +1247,6 @@ func setImporterPodCommons(pod *corev1.Pod, podEnvVar *importPodEnvVar, pvc *cor
 
 	if getVolumeMode(pvc) == corev1.PersistentVolumeBlock {
 		pod.Spec.Containers[0].VolumeDevices = addVolumeDevices()
-		pod.Spec.SecurityContext = &corev1.PodSecurityContext{
-			RunAsUser: &[]int64{0}[0],
-		}
 	} else {
 		pod.Spec.Containers[0].VolumeMounts = addImportVolumeMounts()
 	}

diff --git a/pkg/controller/import-controller_test.go b/pkg/controller/import-controller_test.go
@@ -785,7 +785,6 @@ var _ = Describe("Create Importer Pod", func() {
 		if getVolumeMode(pvc) == corev1.PersistentVolumeBlock {
 			Expect(pod.Spec.Containers[0].VolumeDevices[0].Name).To(Equal(DataVolName))
 			Expect(pod.Spec.Containers[0].VolumeDevices[0].DevicePath).To(Equal(common.WriteBlockPath))
-			Expect(pod.Spec.SecurityContext.RunAsUser).To(Equal(&[]int64{0}[0]))
 			if scratchPvcName != nil {
 				By("Verifying scratch space is set if available")
 				Expect(len(pod.Spec.Containers[0].VolumeMounts)).To(Equal(1))
@@ -1299,9 +1298,6 @@ func createImporterTestPod(pvc *corev1.PersistentVolumeClaim, dvname string, scr
 	pod.Spec.Containers[0].Env = env
 	if volumeMode == corev1.PersistentVolumeBlock {
 		pod.Spec.Containers[0].VolumeDevices = addVolumeDevices()
-		pod.Spec.SecurityContext = &corev1.PodSecurityContext{
-			RunAsUser: &[]int64{0}[0],
-		}
 	} else {
 		pod.Spec.Containers[0].VolumeMounts = addImportVolumeMounts()
 	}

diff --git a/pkg/controller/upload-controller.go b/pkg/controller/upload-controller.go
@@ -739,9 +739,6 @@ func (r *UploadReconciler) makeUploadPodSpec(args UploadPodArgs, resourceRequire
 			},
 		},
 		Spec: v1.PodSpec{
-			SecurityContext: &v1.PodSecurityContext{
-				RunAsUser: &[]int64{0}[0],
-			},
 			Containers: []v1.Container{
 				{
 					Name:            common.UploadServerPodname,
@@ -843,6 +840,9 @@ func (r *UploadReconciler) makeUploadPodSpec(args UploadPodArgs, resourceRequire
 	}
 
 	if !checkPVC(args.PVC, AnnCloneRequest, r.log.WithValues("Name", args.PVC.Name, "Namspace", args.PVC.Namespace)) {
+		if pod.Spec.SecurityContext == nil {
+			pod.Spec.SecurityContext = &v1.PodSecurityContext{}
+		}
 		pod.Spec.SecurityContext.FSGroup = &fsGroup
 	}
 

diff --git a/pkg/controller/upload-controller_test.go b/pkg/controller/upload-controller_test.go
@@ -680,9 +680,6 @@ func createUploadClonePod(pvc *corev1.PersistentVolumeClaim, clientName string)
 			},
 		},
 		Spec: corev1.PodSpec{
-			SecurityContext: &corev1.PodSecurityContext{
-				RunAsUser: &[]int64{0}[0],
-			},
 			Containers: []corev1.Container{
 				{
 					Name:            "cdi-upload-server",