On a RHEL setup, csi-driver-registrar has following securitycontext
securityContext:
runAsNonRoot: false
runAsUser: 0
privileged: false
But on RHCOS, csi socket creation fails.
SElinux strace shows permission denied
.
When I use privileged: true
it works well.
Could someone help to understand the difference here. I am looking for an option with minimum privileges given to container for security reasons.