Function transformValidatorSecurityContext

controllers/object_controls.go:2315–2320

transformValidatorSecurityContext updates the security context for a validator container so that it runs as uid 0. Some of the validations run commands that require root privileges (e.g. chroot). In addition, all validations create / delete status files in the '/run/nvidia/validations' host path vol

(ctr *corev1.Container)

// volume. This directory is initially created by the kubelet and thus has
// the same group and ownership as the kubelet.
func transformValidatorSecurityContext(ctr *corev1.Container) {
	if ctr.SecurityContext == nil {
		ctr.SecurityContext = &corev1.SecurityContext{}
	}
	ctr.SecurityContext.RunAsUser = rootUID
}

// TransformValidator transforms nvidia-operator-validator daemonset with required config as per ClusterPolicy
func TransformValidator(obj *appsv1.DaemonSet, config *gpuv1.ClusterPolicySpec, n ClusterPolicyController) error {