kubevirt / hyperconverged-cluster-operator / 24505085524

80%

push

github

Fix iommufd-device-plugin SCC to allow projected volumes (#4172)

The iommufd-device-plugin SCC only allowed hostPath volumes but
Kubernetes automatically injects a projected volume for the service
account token mount. This caused DaemonSet pod creation to fail with:

  provider iommufd-device-plugin: .spec.volumes[3]: Invalid value:
  "projected": projected volumes are not allowed to be used

Add securityv1.FSProjected to the allowed volume types.

Fixes: CNV-84553

Assisted-By: Claude <noreply@anthropic.com>

Signed-off-by: Lee Yarwood <lyarwood@redhat.com>

1 of 1 new or added line in 1 file covered. (100.0%)

10663 of 13244 relevant lines covered (80.51%)

2.07 hits per line