I was wondering what is best practice for the csi plugin. Currently I am 
running an nfs and ceph csi plugin. For them to work properly I had to add to 
the agents bounding_capabilities the capability SYS_ADMIN (currently tasks are 
only using net_bind, net_admin and syslog).

I also had to disable authenticate_http_readwrite/authenticate_http_readonly on 
the agent in order to launch the plugin.

I am starting to think it is maybe better to use an unmanaged plugin, any 

Reply via email to