34601766852
44%
main: 37%

Ran 11 Sep 2026 01:06PM UTC

Jobs 1

Files 75

Run time 1min

Badge

Embed ▾

Committed 11 Sep 2026 03:36AM UTC coverage: 44.026%. Remained the same

Build # 34601766852

Build Type

push

github

Committed by Dundy Pasupuleti

Commit Message

Add configurable securityContext and dnsConfig for the operator Deployment

Default the gpu-operator Deployment and Helm hook Jobs to a restricted
pod securityContext (runAsNonRoot, RuntimeDefault seccomp), configurable
via operator.securityContext. The container securityContext (no
privilege escalation, read-only root, drop ALL) is fixed in the
templates rather than exposed as a values key, to limit API surface.
Do not pin UID/GID so OpenShift MustRunAsRange can allocate; the image
USER 1000:1000 still applies on vanilla Kubernetes. Expose discoverable
dnsPolicy and dnsConfig values keys (dnsPolicy empty keeps ClusterFirst).
Operand DaemonSets are unchanged; they still need host privileges.

Fixes #2533

Signed-off-by: Dundy Pasupuleti <pasupuletidundy@gmail.com>

Coverage Stats

5708 of 12965 relevant lines covered (44.03%)

0.44 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	34601766852.1	11 Sep 2026 01:06PM UTC	75	44.03	GitHub Action Run

NVIDIA / gpu-operator / 34601766852
44%
main: 37%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34601766852

NVIDIA / gpu-operator / 34601766852 44% main: 37%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34601766852

NVIDIA / gpu-operator / 34601766852
44%
main: 37%

README BADGES
x