diff --git a/charts/aws-ebs-csi-driver/templates/_node.tpl b/charts/aws-ebs-csi-driver/templates/_node.tpl index 282fd164a6..fcdae33f75 100644 --- a/charts/aws-ebs-csi-driver/templates/_node.tpl +++ b/charts/aws-ebs-csi-driver/templates/_node.tpl @@ -47,6 +47,7 @@ spec: - key: "ebs.csi.aws.com/agent-not-ready" operator: "Exists" {{- end }} + hostNetwork: {{ .Values.node.hostNetwork }} {{- with .Values.node.securityContext }} securityContext: {{- toYaml . | nindent 8 }} diff --git a/charts/aws-ebs-csi-driver/values.yaml b/charts/aws-ebs-csi-driver/values.yaml index fa0049d7be..9329effc1f 100644 --- a/charts/aws-ebs-csi-driver/values.yaml +++ b/charts/aws-ebs-csi-driver/values.yaml @@ -345,6 +345,7 @@ node: type: RollingUpdate rollingUpdate: maxUnavailable: "10%" + hostNetwork: false # securityContext on the node pod securityContext: # The node pod must be run as root to bind to the registration/driver sockets diff --git a/deploy/kubernetes/base/node.yaml b/deploy/kubernetes/base/node.yaml index fcde14afa6..6d428f2fdf 100644 --- a/deploy/kubernetes/base/node.yaml +++ b/deploy/kubernetes/base/node.yaml @@ -36,6 +36,7 @@ spec: priorityClassName: system-node-critical tolerations: - operator: Exists + hostNetwork: false securityContext: fsGroup: 0 runAsGroup: 0