From d2ea6da1ec6656c66326731e69edefd07dcc75c2 Mon Sep 17 00:00:00 2001
From: umagnus <xinyuyuan@microsoft.com>
Date: Thu, 13 Jun 2024 07:07:17 +0000
Subject: [PATCH] Fix shield guard issues for KSM

---
 charts/latest/csi-driver-smb-v0.0.0.tgz       | Bin 4943 -> 4973 bytes
 .../templates/csi-smb-controller.yaml         |   9 +++++++++
 charts/v1.13.0/csi-driver-smb-v1.13.0.tgz     | Bin 4756 -> 4791 bytes
 .../templates/csi-smb-controller.yaml         |   9 +++++++++
 charts/v1.14.0/csi-driver-smb-v1.14.0.tgz     | Bin 4916 -> 4945 bytes
 .../templates/csi-smb-controller.yaml         |   9 +++++++++
 deploy/csi-smb-controller.yaml                |  11 +++++++++++
 deploy/v1.13.0/csi-smb-controller.yaml        |  11 +++++++++++
 deploy/v1.14.0/csi-smb-controller.yaml        |  11 +++++++++++
 9 files changed, 60 insertions(+)

diff --git a/charts/latest/csi-driver-smb-v0.0.0.tgz b/charts/latest/csi-driver-smb-v0.0.0.tgz
index 92fcb3ff302220ad9bf7a6bece5397d0b983574d..6a0a322c1d56ef0f754f8888c2da672c9cd31b3a 100644
GIT binary patch
delta 4959
zcmV-l6QJzRChaDWJAYk!Z`(MwpT7<CI}q*wJF~a)E04|<kU!caGgHho3F34XgUzC#
zrDK~nlBgvqH{LYg{eln4dQi6fNZRh0KpR^k&p9N|IsB1_q&-d?pOG0bhliu?=@c{3
znd30{Zg;8I>-CNg57pmZuUG!t>mLuk>mME;3|<e8`~BW`y?_2;Z_xV=^>!#jZA!Sn
z?7QC9yvmjPMiP$6AHX=Fk&9;i7LMcWYk&oC(ei<NjKo4c8@_*wPKWQ%nNk@vrVRa-
zjDSTTfVUzXf{ThO)tY7Gd!1gV*ZR^m-lu#j+5Zd&3Gf{|faUhz?;X58D%=0y_-Jqc
z&yh%oC*Zaa8h>F9*AP<|F_;i8*t~Q16Ymh(<z(V;K^dMv3n3nkWOjrY#FP_3+1y1F
zkI9^OKXHc(JR#A<$(8Eza1;m0ghZ;Kz!MjFIKphMzQ;)rT+x7da~HiEUr=$yfI}o&
zNV<|MMrTAi5MWilOGNET&5jp^7p!N8$`7qz9grDBz<>D_qa#?4b6PZ(MRR-yo&I1o
z<B0m8-RrgHfj6kQB$C=SOUV>PY0w59Co!Y<b4!O$O^;{JUv@ZGa(p6@Pe1Xr1McTJ
zzWq+WGg!{H#evO;2X8!&CXtZ5JqB2Siv&vmy+r?*LZm*wLMAW5Ix|O~ND!bAm?FL!
zq2@H{pno9<Bq$o=fCD09`4D}=k$RYLklz`ipQ4WBM<c;#5CGGo84pL!;+ey->88b7
z)!rPpT5N>9vdA*G8X4tq*wVe?<{x%EPE1d>T4TT>VM^s7!lM9w0r3Y7k`RUh3vNiZ
zax!M5s<O6Jw*|z*+(rEsLVm>4RzD3AE`a?^7=IW4AY%F}<>CSaLN5`XVG>B*NDl}u
zI)gDz0`aP@RPjX%p%4Tk9>1bYxM=Xd$A^b@qnZK^#B`BOY6nZA%ji9p<Xqij>BCc9
zv#S6{uy_^F$?q_Oz(q$bgg#MrN21AlsSsy`xv1S0Vcb?t!D+%g;F`6~yGR*BB6#{u
zR(~W^Du2-Hy(i`=gMTN$^SQh@aZ$e)R*DVMQkJ^cGwW~3Ec4R!ECyS#z~eEAh?u+R
z;n7&b5CZT7W#*Bf0Wd6Kqao{{JD9tut!#zS06GirA$>`xI=pQ-(pZ+3)Y|9wgbSX&
zfbkeS;iC2h9ePvnlK|R{=o_nurS3dA7k_69HZA2_qz&Qw4^d`|+JK9?-oT&^8uV5x
zAW?F^a5;YFxO{$5a4oVZdWn1tA&oc)<$0ddugKO8K)9$o!>k*SQP(_?@7U<*6nj%R
zBTQ9Jc2rx6n|@d0!5y#>Fv_Kq_8}4k2gsAfULgo$F-Kf55=~GDIO53H68=!;*MCjP
zbbmCguNaKUy<r)vFI(`F6g}_bk9JeCYE;R;J*&s5g)QH#lWQ3uQ!opSA6}vlQ2?AP
z6oCT<*q@^*_NAF1g?SK(xWGXG{wrkYbW%9gG1N{Jo*`UGMi}@t_9hXP&E_&w_}i&_
zJHzZYAfsFJ@NY^TLOO%t`?v3L9DkE&a+XLn`w)c+SEUxd)K8b38|9li&aG7QXroR%
z+(tFGWchTeX;>7Yc||=_jgm+=RX>wSDx3z-qeP$(&m~;Wv=xOoN^lU&5e_(2#Pcet
zc-HA-QJ3^kQyF`ZMB7Z`)%L{=dh_At*URg7H-FyV4*wk9oWE~peU=STrhgII6=ihO
z%C%Zv!UYX~$0G<d@0Typsl>pZ6bI2U!cjzp7EXeG?EC6Z5FjxH6jPtKV(PzH<g$|q
z6pJMkiZaN-T29LlMpukbM#TIyz+4f4h$qZUJ!EOb6E-6=$gBnNDP;mrfJ;&g#x9x)
z5p%cOEw+VEJuab#2eD8e#(!jz=$`1t)OTXT+KCy+F-Jac#d&#jAM-gE5IUY7a~+Qn
zK|CBt?nCernOn_{;9j7KlvGxn#xZ3gk)14S#ga(n!6X8PFh>!M7^MP@=7@t3a;U?I
z8*-<bn&dE=Be=(58~}3V_fi%YJxJPb_y;cM1^r&Hj~-i=OdLFqhJW!Dqhlgr(}S4D
z;G*j!5+nqJI3CgCekroD{wE-e)w*x@;_~Kv*b(<)dmgLS{|^oiO6z||M}vd?`rmV;
zn<=OT{o(t!>7qX2XkyINhd7{fP;O3nDdQMAt=0`i-W0sMa%t_y1QrQ@h2j7(2Who#
z%K#Qn1juou|K~CG;D6-d0d=lH<?CFePtoI}ltB}79Bu}JlQxdy5+sq7Dn!uZV;ecn
zCoH__-pZGyTKoSvg&+pTJ0jjT6tKen`$xz9lKmea_FwPq|2fjbL-+4!MnYE(%}9=y
za<DuJWwUrwaM9npkB_aE%65Jq<H%P-zO*_ChU8~Y#f(+Hhkpl0&R<CcsLjJsM`mjy
zXYodkyr`q2%*s$Zf9Qyl%y~Hj#)uE-vjnJ-hmH@_M-mQ`v7Ah|odq$7eDzt2W<Z&o
zZBHQx7t;-7l}l&W#Pny0F{{o+!Q#l1P}SyQtYtzR;R*Q8XkIEcG;7s$1q~*CctEKY
z<{Pn7TP_Q*Dt~UeZQo>ZTvJT8N{3Ios<R4NO=X<LleFY#wRSAsar=MTsQs~RXvx+j
z<E-oQ$Q!A~MuPr{!@!>7Ga``>kw630{F<EXO>4)-Nf1at$3W=r&5&hH*UADzoqwS$
zIcZhE>uQlnvMoPzRUw9>2`nuq=gPX*WaH&4VE-t^`G3*|UrM$9zcAZV^T&;Y!Ylm$
zLGN|R{||bHy~Dl#e~whLj=H6)$Hy0~I}-UWI#aX$A&3{P{N529$Gki1zi5RZu#W|H
zUu0n^X&iO*_2L4O^mTTH|8yA}EPNr|3yHiS@k_qEllLq#BagvTQY5jD1q=nl0w#0y
z2q8v;fPX}j59*zHR$Xz=iLREzitmls2$>0Ho}_${;#NaGlyKCn4x|im9Iw$psd=UZ
z7j503RgN=p*Jq57X-%mwpNN>&m&>gI<rwByhF;`{h=qJVneI*9W?Hm7!(Y_F@V<;w
zx+qIi%Ec9<9&i&e&A-f65iVBhXS!I0KBIppRDY<MNlI#}LlmDVyDRc2EM7HfvwVS6
z$(uA#g|br8bj2;#hS?(Anr&}cBFeQ^<!!E&QVPn!<TbM}K-Z|}Vvx^us*{Uyt7dzV
zj_p&-b?gPTyY1qLy=ddb_Jx8SAf&gzXh>8jnr?|fkB^micCv1LK7l6^KAA=iI5d@F
zOMgy<?#vin<#u1xQ(ElND5!@czkKO|YoB(Kmg2wSUXqOg;EMf!gM&e@g8yC*_W18P
zlH)ijuv2S&Aw<Fk>=wAr2J3Q45^2!T49ztKa~jJ@M3sWLJnRC!*{ZPD$u3;_UJJ+z
z@ufUEs{v=$YG#<M2+5ivvRXi9WtJOL7k{8Vi#erp&C>LH@%}T4asz&WUT&&dB%KS0
zEz0C#X|83$Un*9B8TpBE1}v*cCRhC&o+-nbdNfmJV}Wbtd2Z{9z4@~Y3tGiJiWOi~
ze4V4Upim5OE~|bC9IjJkz2u$`nYu`A^{G>(ysa!Y;pONp-@N6bcDt-q^?F-omVe*e
z*MMbVr`1x<o1@s4Rq)b`B(E0bU}V)A%Z05rS+dAF)hN!jEK{v@lw~cXUIprPI6d2d
z-3+Yfc4QV2?+y@qEp02B&gV9mIuG6(V)q^KELt@}m`!p`uA9B>%uWXF%0owX1onLf
zoS%IE!<)0S>+|98M@z;4un)`uvwz!Rb&dvcJPQ%H7YsXk(00-RQ*DOIXNG82uAtT{
zQ-Q)eq&F10Na9xcufwT#x9+Sb-};5QPma(`ZN*lbiz^+VHdb9>G1YREBsAN-sdop$
z@d?W>NMyUCY#yTkU`)o6xH&J<9~1>H`=o+Y46uJ01@mi4#m^)Fz5k;yJb&us;TVrd
zKm>tOwGr|ejmys*^yc^9D=s13_T}iK5e+;-VWZe?9l{dQRog6P-q0QFienRJP&E5G
zv(PzJZ#aU4KofCtz$+Q1Lc|V4eoRRuP6F!TK%yzvj+cs(FZLrBh1Qg3Cxf-Dv`Bjs
zBVA&KGS%Dg21Z(t_8YNL9)FIS7^VaWJ2l4&!Kz8fEE}5MCe+Jjwpu$=)MV31`-tt#
zPHK$E?DMY~LQ`A({)f}yyN~A=XIGc+E^cgtx;coGxdL?xx6`Y!-Q2MqJ7>LEl<m4P
z6!g<{qG~B-4&^w?yrkLHRJ(L|r$j8KtZL912GwUCn$*iWGMg-=cYiUXf_gM?(aq^q
z?wxf9vrc17f`q}%lmVa8z}H7L7D;;3UqF=2QF&C9IoGlr+9hdk`k(U4B{gsAjpc-z
z;NT1bJRgEbBcHqIpjXIahKTHSzxX-^MyPKuTnp#&`fJB@Nks15Zntg>Tk1SxMrI^{
zN$yC?B0ZC5eIn3UDu3M6o~#T+7;g_rc{r*W<8=Kkb3|*!)S(!4a_`}>QlctpA^VqJ
zPyN=?%JqNa*|)h7VAcNL!JxeV_w{kFzhD1<j^sE_VY%NNB2Uki&-x}ha5{XaH~20O
z1Qc;Vwrr1uz~1!Q97<Un+>NRKE*jIz=zZ=;(wA<Mzf@Xj|9|NLv@N!Pt%&~}4F-qh
z_}}Y;ef;lPQqBIaY};3P*Vp>7!IWgSpXiA~gQZ<w3Lq3Wc^S;G_8zZ%tT9h;lMte<
zHJ&PhXya8IZ%Z@pG^AiV#b=92rKkAp`<XThfUVpbwM{7Tn+_<Yl-G%1s$>687AYz%
z3ooF3!+F!Gdw*LubJF(?sTsq5wfVVLn@fvQ8>~00RSGAjOq`V6^X99|+b=<!y0=o(
z)PL(on3}C!FQ0g)ZhGA{=CrEzi=i5rhUF0bZVhB5gR0Wnifm{sPr<#J;S_arePc2g
zK4iVA;<7Oo)06LiIJ<uL$NBZg>+@ee4lhrC`*`){=6}~8n=N9(y@pl!<k2w1kzal+
z<*2`PtONI8DX^X33o0S?;lxg=G?>&ZaUL&U;@t5f<}wemAZM$-ova1!na0Q;-@3hR
z%m3t`$H&`SJt*?q+uE7?3i*Ef@b>)U#pT)g$BQ@b&ux<Z%xGBElQDt7zlL%3jd`cX
za|uzEd4FA`7fYD_Tj^qLHo19_Fb5urvM$FSY4L(Kt|F4pyv1l>X@Heu!am~n<syC>
z(kzYjZ4z;-j}TTeN(qR6^8F7*qb_GuK}R_ub|xSkZ95JZSn#}5=JLXh?dC#z?erx@
zYN;vI*AzLvx~IrV^hHG{78kelW~1$5hHGKWbbppn6P0_m&|!n%pzYmPAM$H9T0X^S
zRJs?tnxVmPwR(U_am&)dVaX8x_;~vi1J~m0@0dF=iNUEfL5|SvZRb{Iy3G~Kf~n<_
zRTk3nH{l`6m5RJXVhS9TIdFs-ATCG{q-zzvIY1u9SP&J?oxhSL=6_>=60YuF%M+tf
zFn^bWqPp;a`XEO~Ls32&fxyTdzEAH$I32!2i#u<dw5z1DMdMbBFKyxVx#?yums=N>
zY!Dh=p@iyyrxd#Aj@Hx2rrNkBvyy7=Of7e$lIy7BHqBh5wU%CP)Zli0OHlYSF3Y{H
znL&L_@8K@GVI3>TE+MUmWOw_UOS2Yp>wnm=bxSOnN-mS`lAY?aTVL@N8UNL(QT%ty
z--B2Y|2^zg_kRoyj`#83=SZbMlsX)?%jmBrxR3qX+v2Grzg12;{S^+5?j+7DOSBe4
zWAkI9rscOiF<OkbHVvceqn$epq8k|SEl0a6t)YA9t3EloZ9KfmKH_~e{J-by)qj?8
z@#l$LYrFdrXQTG9@8yzxx!AY;WO60jc9G($!aqmY+miXK33;zt;y-G#h`-S>>@7pw
z+J`JwAG&7sp<BE9u-RGg-G-4jIBU8|5V^Zi2)XQ*_W|U60D0{*rgbr7E7d0mBHyvm
zk)wZc>7?o|vY%!u75=)9aIOXFzJK~i?&<;IYmMUW=4}3wbEwaJIJ7*5S_c$HV?4q7
zH=o}U{qt#rMmVrapvov;k)K*dU@^qv&$FR+yE;8-Ciddz*LF~WOtMV=iYH%h6kRLc
z*)aIBKKN-Ad1;_dn~S)S1SNIaSwm&fy3NF@AhC`0eBGK<>227zwR*k}zkmHjQ*Hc@
zjj-pKAmEe6|9S_9uU}W=fBWBmdX`jKnlD~lsoaS23gv_1*~#!>p~&)R;EH=OcNrRd
z3V9b%nO#cy@Q`}pau7}0;IckY?{Olgl#&0aajAN4U;kj&H4R{SRTV9R8yvV7a>5wo
z?{8FBa5k<KO9BmY90|gIVShA<xr_eUZvU%QLR0^2$Fe?LKqL$}GMQ$;Mk>PuMEezL
z2ZXD?>Sw*=2i-LClP`yQP~|pY=mnUBjk)SzvyE5r@&p@alfw%z=MC%Guud?8NNmt@
zrZ%roJFa85x>_D5(l&Nlp{)pdlro=0d7H5DP*(dijb`nA6B4xW`&gGU?yAwgC6P~}
zNprJrZseu=S)Gw#)p+woGWtL8gt2m~b6p_MbuLG4;#{ROGL!zQquboQp{x^^G;_{l
df9c_SpY~~=_G#nv{{a91|Nm`=`&|H#007uoz4HJ7

delta 4929
zcmV-H6Ta;2CeJ32JAXZEZyPtZ{VX8=flvyx-J8+Fuk;S!4~d<&K{vKxIb9U%ML^9Q
zNxYsJ&XOF(TG#*mf{%G~q|w7px)p)M(hPadA$eXrhon4C9G{UnFo%cZ{@DyO(Ocj!
z_-1!yFc=I@j*isd!C+ARI~blEd^0>c8NNO~IXoPmd@~px4Sx;~zCnW>($H8EE-?FM
zur;n~=l&!G$K*F)oY2Tc^I-?aarQO90=Ve-z&%D{p`MLCyhUfD_vl=)44P1eeoe-}
zA`rkk5e~scWtQs9Gw_4npf~7z=^pP(u~g)Lj)MgFjupUi`5z7rUmsWH|KRoOz5G8%
zAt9cE+d*iIIe%P3OkKoaO1NN)-rbM9M`)juslx?jcnTeacsQ2T5n>QiP6TBO7fn4T
zYu^3H9WL;cL{q2Gs?Wo593)c`sfGeiUF6{ivxWK|CqZyU1L7@Q^nP+d#T5e%k?0_)
zO0F246RALe)$uMNwJ$k4&Ku{b=SNBptw0@+IYhwu6@Q~+SPygBG?q;Zcn^BRgVl&5
z>VsCV*BS@jpyLuqD%UIpQzoUw7<in-jNUIS6FxIDo+*Dh;at)2nM6MQ%+m?DUli~T
zd&Azra<m-|Y)(9Q<9RfRgv9MJzye$(SOVxJ`o|0+_4yStbrIH;Ir>b30FA*k@s)*I
z(4>b(Ab*gcXo3R{h)m=|^chF$VZuRvXNZ1|dJ-Rv1fxL!Oj|P^j-C9O!?BsB{H+>q
zjyoMT#$J_VSzB2~X%0JjR@~ylp2vxq$xdeiSR_ob97K2=z|SClqd^kFNMOMY$WDRA
z3{;)gj+(ZBc$m9r*g?pTcslB5LBa*Fp9tgPAAdy5exY1kfI#Ra!gEXli5qEy;G%Pw
z;3N>Qnp%}#bPx(bFyiqm%7lv!{`chQ$Szbfz=4?M)g*VYB)W_~U<uCEGnPI)(>=Qi
za0L0QfKLAoa|m2?+(GCwWp^Z+evk}tPMC|jeG$f8H58mC%mc1b+q8?MF(iVg-(*KZ
z#eedLgTV)4o-+7%0=!tuixU?O2Vt$*LE6gF_hw|nEs<qfx*5g6Rw(dfLLwp-E_!%0
z(lCMmJVBXxBxnE(OSjR0b<iCwT+~&v!e{`!Tzg1e5~>OB8jLiSttGVXyL-X~PhY@f
z0-kVD_kxbR8Td&6-B$38RK${Zo*av_1%H~3(k)Vk@cqXqlSM7SWnOO~P=_sMs}qnY
zxzAOOpD8Y%UzAjfY>HkYA45nZ4nk?3=hQ25v;z<>>d!Ij2V~qgPvko`K0d?V49*Et
zos$#QmE@-1l|8rvHU>tyRMI{~g5Usove_#HVJsGi3r3<T3IRtP`I^G-tN8jUn1B8c
z2K5z#3Ar~YWA$YVd=jGPefq&JN>+}l=(lIpIE`-0pH|6rj3ZML3++F=L?5F7I9FZ-
z4j5p6fo9m3VuF;<gGj^$4g&CBAp@tEx>G#^?Ns?Qge%Gj1HVDuq(^0wxl9zkJ9BU6
znB4|sd}|(lr`RE+a~OSi`vJ!>iGQZ&iDa{nQK<Z?RKl0)>56ird{f1_6>A=EG>J#s
zu;!L1pN=&Rin427W6zYMq^Fy*pQ$7nPCL)zM4%8aq`RDPD++Ox;2>Ba9B`_D7g<u_
zY~sf<FKJU#vpq<9+f4hb-HRLa=HtyTm)Gxae!smP{XV*R_o183S!SZlAb)gg%;=__
z>vX(?3mX0%k0H>wU%o_V(g*e=IfzaWjv^{Fank9>zOViS0TMGnG4**Trv96}mK{u>
zP%ME^ra>BOxhz8%T`@u#5sR|`a|Hk*o-niYkgX9<*qqEElNQ8hlnFcqE<rJvxM(Is
z%-w#!JQhCnxO6={h=uwvA%D|E&qP0_z7reNPRu~s9QnKx7wOS+%okih=y=-ZIvyi}
zcsP*QN8ly0wpty*y+Bh*sq8q7W6DG#Ct3E2C6TIwNdydGjv^W{N(CA(5C<Wosl$jH
zaAz8t#4uhUxW{1}0CMH`N);D9NZ4=qM=sX|!@*#P9y^vw96XPP@qZPg6C&NF2eF93
zMb}9rNC?K`ctnr;P-HFsCm@Vf+_!&mdGl`66Zc|!9IN90hewB%_}}sI;qgBH_Z;PB
z1}dOG`tUXl>JyHpMofK(1G)gE=9HE)ilNu(+)(7rz`Luq)_P1}k?>b24ghnIQtNh%
z!{UhmIgZr-JjNcJK7Tx*-ZiLty^HiIdVG{LXkd=RjUhPg;yA9jBoa~$2zq?%BFFiR
zg*V$v`Lfa||DR?M#K3q@#M`C<R>=SG_+(g-|C6J`;a>iqqdYwH|AyuybfsxV(q2kq
zc^b-L@n+znzx5v<I~`T+-F=KBUzvO<b<!D<pFNc`R`nhp9DlifB@v)5563-Ot&5!e
zjkLU|r?bpTP<y}WjFYT+IS0mw59kl+phg}#IaD7>I7%jRG2L}?U=aE0vnI_rWpcGW
zgCNY88^}tRuC9UU&(g=ND;MP!N1k+5Z7RmvCd3h*g71tMl~yAYt8Qv&eBy@(luBW7
z5POa7vIMKbrhmuwO_s+s&E%-`_^huct5nr=#>t<gE&oulW2uh2|I<a?PhA5`jwYF8
zQ&;r7ks53y=<hfT>^1&CB=R8==s*p>1}A6JI<avQ1k#~nAoTQRo@K+-$_67{KWCN#
zwJPCtl~<BztIu53h~a1oOWVn{vYs_Lc*PFbKT2}Gw12=?N~8WSt@hOVapR=$3jKdL
zcwN!|2ZN*G$zK0IN2y3hQ>g0k@kQs3M81p8)vA94;zg&pcLc{V@6U%XIw1(`V}acl
zSz1a8M-zM<TtE`OuCDw)-Nxn?zL4sLL|%~i6<yvdY8F|M$KWX{lGw)rMuK4h(}jA3
z5TijrqJQZ}_0Bx2N8Agft8iHPy&)SRv%oBZlrK`h)qoGBJ8Gf>DMB2_YYb2-o+-e5
ztXquANk;Dah!HZQDf#6y5wqrYg&0r)VKFlFqG%#=`hGOio2t#UX?2C4_rc)4j8nKM
zD>KT)6{8+-lQAv6%%TVvEBP}GR-r%8zY{9d%6}vUHPb1I&y?Mjag>5rZN{wFAZ7A4
z15|^om^6*J6~-_N!mT;>mJm^4v}$h)qm)8W3Z}@JB?H~Sp1F}POsZ4Ja;sr`k=phd
z<~sL+y8Uk1V&`L=Z(k_M0YZ8UjCP4iP17wg=<%`k&JNaXt|#zRx=&`10}gGe*b-A|
zI)5`nSB2dd&5-gv8YT8{<d-jPxb|fyWvTyH-b=Ev1Gr-U-@#ybQ1$<g2mAfM&r%%6
zNgX>C>kA<gHpeda>uhdafk`6mG_>>P+B$REmy;e<>ckb@F3_8;N_(B`#HH^wfxMJo
zDtc!P&Y88FnNL=B$=Z5kjSiU=S;3~}PJerrb4u5mmF0K-{tpxt41Nh-VX0aMT}X)K
zZ3?+G*RtTRG%L9o#f5R^Sk^t6LiY>)Ox2xf_GYSREbf|lUf8-~AO5UD4y(LJvE~?+
zUl(BI5XuS8W!<khhwF4%hun)PQx~bNK25Atl$CrFUIE_n&08+&cB@>~%(qo!#edCx
zEl`$rS}n!Axfk295?)!66xpJhjI2vzwXszuD-zkn8s)W?WvR6ev#jN**B$jHKRw%k
z-OgDr?8q#8ygTsN8(~|$>0)i;Qx~20mcILraF(SSA<U+QA=ks+b>^oB-P%J(P6YOS
z2ArRM`~92q^Xqq`(GQl20bn1P1Ak_>!|EC>@^}^?a4#5kw9$4_gQ+${6)QtDuXa%L
zmFYm~9nu>LT_pWh`LD;Rcen1Ur#SkhwNC-iTy4cxn~Q4`pf*-rVKLKmR46pty{UHx
z!tn_!1|+iGQ8tZHa$row3b_R>GCU{~T-8Y>su*DZG71*gl!~870DAvN$$vcN1D|f%
za`eH57V=!$=CxaKUIMx<S>?(b3iGZowh`sB&^9r(uBm3j5hMhfh|@z}t1uHHb|CU&
zN+NL@P!9*v7jo_1PMPw2H*uM04S9Zgu$GLKVQ(U0ON2<4W(nLt#7fjYi-hrT+(xXV
zao(vg)d1ERT2|Rma5jNn6@QY|yp?(^Hjc7eOJ{!CAOdEOeS`T*CF$Gm&qnV*y}LNS
zx_p0eV>77c5KJb>>I7_W&>(q*BQti)I#84Ccrg(4({zz&X=V<@I7&FA&@^<ra&V>s
zET*h3j+y_b&l|Mqm(?noDwTIJqk?)gaM8`#RpFg=_pmM#OoD{L&3}vmpV7eA$0YJ1
zb>YuYkx{)ibWx@nt8{3EqIKbasxO!Hysa*ki&=t$a|rNa1Rjli?xMp%sg6<b+3R8X
zbqtJ9-`=><l`8VD-JeP#a_{#0O%`aW>WdkflK`fL<0N@$r5B&b-KsQhD-BizB8<0p
z=6E=6urIp*merNDV}I&6i8}N4@K|e6r?gc4OGhI2<x7;6@qc4owz&~t)&AdugX;d@
z*C)fnef<A9isLw?aKAZ3o}Me84^4L9Z1i4l@Liq=DElH=*d7akz1g)nl#(CZjj8`W
zn$XMWL*Yo$mmZS8R9Pwi=>fDYwt%h3{~aG3998pwuaA!Q@_+vvrD6Y9w(YCB>udeo
zU<xwZPxM5o!OAW#%O<Z)_jomJ@!BMXXd8{E${^ZsHRjvW$~#Rd*iP};a#HCjKKp*A
zjS^rhw?=J~O8iqNlv2p+WH8mS|0l~7RRYWT0;T2Z@65ezTL0;Lht#@fAFqC{cy%Q(
zwn4;NMM|8QGJkPeRnMEpr?(G-oVmA>)6{?KXPDYWzn6y(QZ>D9lsfII{bHyVqG35i
zzgq!WiJ;E3wk8`2%Tr))CpcvuU0;~Yg%8<ms=REB#q9Lk@6WH_|Mu?s)AhTbKaDQW
ze*JXy=H{0l+67YKUb|Jr;?Xd~kzai*>1e)ntOxgCX@9UC;W?C$`fzFoRWT+FVb+u7
zVb&c7QkQ9v9GtEDcCZ$A&kRQK_}1-hSN<peJU-suYNN<+ZyQ(cE9m?6<J)(iE-ugC
zeY$w_;hl}LpBN46d@>;r_}4J0zcKH$J(n)360eK&VhJ;UD^;vbCO1zr7MzDNt;>Cn
zw0VgeSAPL1R^GxISO#FFP1t80zg*T)yEIGljhkfsnzNL(ijo52pMLv&S*WWORpL`F
zh@B}2N6U`G1s1$WmASmIXS=!3-aCCskqR}1`kErgSN9Y-iN2`l)S}{+-fXm8-f}G;
zGhJmgWCoutec2*GX?yq8rybi_%crnLm3y)46@OZotJMZ3^;?!2hb1Qd@$vR43|D^k
zcfy^R#NgD1paAIhws$Kl-4>c<3EgVTItnTIo8XY`DotJ@F#`@t95})Z5Emo}(pZIW
z4v>d27Gz8UA{MV?i^X>gP{P&yYeir*3Kr5RstXUO57Igsi1N`G1V-lYeR>zd+2}pW
z?|-~)Gp-WK7K2-FzI24w$EJt5+HPI9WP=3v3MNzsJSEX(b+jHww&lh(kyTi8XKcA6
zmRyG&w;AR#thM-ZqXD<$TjGT;!?IlKnibTi^d9cA8rHdj>=M!%Np`irIW=n`x7voS
zM`FoRav61(>`b5C`iif}_^&Rl^1oaD9)HA&{O{4AzW?Lkc(Bj^K1Zn}qSWEAU1onZ
zz<uu5J{C`v`K@Ep<*#sXbSHUU*`kx1#`ecX&B$+iVziuZZJS2dM>}_zL^p20pE=uI
z8x1`}U-ik!ZS&!6c0=#8;r~6Sx3<iSKTqab%iWheUA51Be{H#M`^n^5we2#+b$^C`
zj<mO>@>i4cUKQd$ZWF}c=ot2vDQ>Mp^5{d~L?8N%(TB~>g6}qsyuoSJO_Ip{jZ(-}
zwY*Ot?-R&tpL1=>AzPt7K@$0njgKAui%X|<b&>rvQ>F3OeT;N1r|zrI<gPXdUuzb3
zd;b$HKMVWJM_j8m)M`)|jqw!g-+z35OZ3mD5gOsZN`Y#lbVYG#8G%I*%RkSCy50Kn
zq#fD$&#&#E0~uu*{WVR#o)ujy-`O(xvcB`vD)Z8Uoi-<NBMK_)w6lTAvUQu0RrAC)
z=JR!XQir$U+&1$0KK=F=Esgm<HpZS~l7LT|{~H`0y?$NG{~hgr|LIvuEq^p$zPM7U
z5v3KX2gS3K;iFQM<=Ma$_hRlcHTV?t=2@9tQu^?aYT;@UP0HZ1IZ*F$B4(74|0ugu
zKew-cu<M!zu)M1Zmhl@LxEFH47!>bsR9A4e?i5P`?c_Mp3ICbVB<3#qXSe&WPQ{!0
zXE&Dp;Q}IIoFh|d4s5I{On*UiU!iV5xcaMp)=PfSLnA-=($s@$w*f*gz$9#qRVSNm
zxXPC&*f5(KUVu4o+0T}Jf;mKDgOM}6d4;-h6S~#i@;H&QvC|H11<<3E`6MdJgbjz1
z+NT*b>+GA9patK*lyKLD_AQBg5>4BSeS0CV+|TNa4XW0gFOu>9fjTFQlv|Z+?s=|r
zIdU82DwUC0^w$;L=IRY)lelD<3mW@No9}(umwnlnjm!TB00960(l0Z|0FVFx;NzJU

diff --git a/charts/latest/csi-driver-smb/templates/csi-smb-controller.yaml b/charts/latest/csi-driver-smb/templates/csi-smb-controller.yaml
index 5f86404efa5..3d2eda96d3e 100755
--- a/charts/latest/csi-driver-smb/templates/csi-smb-controller.yaml
+++ b/charts/latest/csi-driver-smb/templates/csi-smb-controller.yaml
@@ -74,6 +74,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: liveness-probe
 {{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
@@ -92,6 +95,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: smb
 {{- if hasPrefix "/" .Values.image.smb.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.smb.repository }}:{{ .Values.image.smb.tag }}"
@@ -124,6 +130,9 @@ spec:
           securityContext:
             privileged: true
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
diff --git a/charts/v1.13.0/csi-driver-smb-v1.13.0.tgz b/charts/v1.13.0/csi-driver-smb-v1.13.0.tgz
index 70bdc9bdd0f8bb6d20fd62459d2c386cdd085aa3..99523feee914f0f150471e874ee30cb9fb86a488 100644
GIT binary patch
delta 4639
zcmV+)65#EWCATGzJAZxoZ{s%hcz-r9{{!JE(C&UmzH-d2fc!9%r0t;1fjHAeu~`gg
z>DlIYBvDIJo_N#z?;r4xby2o_B$?SYi%x8be2;v57vCdkj}ymdWCqOP;i!8$#Y}YO
zI1IkqUFr3Dz2n0}^|#mSmH+no$A{nb504KH-VTlr50Ad<^?wh02gl!`-VXavTM{lX
z`>wY&uJYi%k%D9LJ1|aY<f2)>h2uE)wbMW7^jbb}kC9lYhr^5a=ydo2ohhC{W6IF4
z$p}~k0(dLJA-Jf>Q>|GU;7gBrU$Rn?{}~Pv;5$|T%jLh{>m3ft@;`Xn+sprR6cXYI
zxGjW6n8OXk)CxrmCWH$%?|l9nlRp6&e`%904@Ys3Oh}|!2|URZfqW1rL2yk2;>}(3
zVSGu&H3JTjXd$Ubt{I&XsXc(LhgI@*oHfqjKIj~G`m0a}WCjs%e$D6z*2A1Ojb+mu
z-a)6|Up?lC`k-~|jmCjD7`OzIN;ONt6uR>FM%0fPy`NXnPo^G|Xg@C$zr)FdH>+-Z
zA(2nN@Ra`d^Wv;`2Fua5IItP<;GO5uBoY$0#{dg(kzfg+*XSQph}7pd$katxSLWyo
zlMVtI3l|)zhY1Jyogw-qlQIH8f1L(N2t$DdHy~TNJ}y92``S{|77!0}7fF`)Bc4+I
zG)TAr_7h=T{DX+;FO-W*5D2|Sc!o(JaU*RFTyzFwoCM-cU8~}Y7D6EiMm&B^nQ+nI
z@5hIScA1(24#YI8Cb@$p(N%PTB{)~lSo-i(kL)_Y5oE6dI{6J|5V+{5e}&K&%0825
zav>Swj4&6qyCRI+iWHnC%mc1b+mws!V@L!~zsZ4wiscV_y$fQVGWd4_JYUO;6BqS+
zVWrt1ZDkpIJ+l6m$QCNP9>riQ6nH!)5fO72Jv<s|7(xJ^pv*iHGysOB%V@wl=rhb+
z)K;>>XaJo|dq`apstIo!e~dJittGVf`90x+r!QbU22Z%CeMyJj6#OKBb|d&kDq_hy
zPmaae0!>Tl7AZsc{$sR|MJ>QZUT+{!2MuPc6_6;o&s2`TP+UI0ET|UQ6um}1hLA=a
zgwj0EsaGVm0}w9i&M@l+WYjfJ>?~)cd`S;Ht7O(%_it7iw2Z+of3T0Xv#-&|C;-lt
zwZ#Dg?9b5@`;wiI@(mD)xWGXG{u^ZAbW*pYW1yWVyHB|48DZep@TK%TY`nQ(nIBHw
zyBTJ80U6zyhd(HG2<Z%l7w<1{9Fu5rmM{`cK1QMPKT=6ps?SPFfbvZh%vP*<w9zCU
zZo`^eqI^2mG$@KLe{6+4Q;w1zVak4{l4LmTWR4PnLOhpl<$_yLh@%7t!5ra$Qw2QF
zk_u-XKNfjOtK^D~M$#)~+OKP0-lBIOZ-2SE`EdKk-QDny;qCcFdogDVRc?sTt}vsU
z4zAVm5-w=?8y-QRald|zPNlEt$?hOJMmUP7(4CXcG4_4+e<ui#m;#Ea&s#C|-(|Jz
zU;>3=34~%Fq*0Tr7lhF@Ba{&_KMgQf03hNCGcLMpjd;RlWCjaqL3~P?z!TsS6oavg
zrb5Kr?RJZ_@Tte8iS{5C>cf~!5<L^$nEFm^P&+XL2vxwV+lur3(R0k_TtMh}+BP{J
zBZ7E1kl2Ude<iZET1CLUKoi+hIdB@sl!-)6vK$plB2@>I2pGZ~MKofR3N)G{4nmM<
zf-vF++^L2pF^uL2?r|6gfL!^#RK-OP681a(kxT!%-|O|!W6M&BgXhsOzGiexq<iro
z<}tYFCW!<I!C2-;^tg}K{a2S#{7*m_2Uq~_US8dve-At2UTlwJRs8?p@Sqg`J32ae
zyN~}pN4cGXisuh6-ls8r!qLQNARpp@&OvE#rGSmj>$F<86nRtdK9^f-6)mtx_!|@l
zfH_Eo<hG12=7|6~jx=pN#vYtJJfO}EsCu2t^eK9Llzq^^9ETelchbgjT=KRgqzVx9
z_}E5{fAa+kZ@O1t%Sx^Mf0{xN1LGYLZ<`8OA^-iO<9<p0j}H$H_VWK6<>8_GS2QD`
zE4>aRT><F_oP?4r-V|K)*Y4wEtEH-)-^V!el{X`$PWpNBv!`;#s@}tcgM1j12vD1c
zqmHcBMo#udIu)p+v&>3RJHP9UldO3)1ICCCf9Ox?dq*BRK2RS?I84T4a*x_h1`Hx!
zeb!ww{^po6G=(6{R#M2?FI`;&)1RgLTvaa0<BvS)h1*n&wM~d4JOSSs%}cF@CR|<D
z(75{#4=9zwJP|v!?H2h}g-z4;-6D@`nn|j3__V7gt5DSp#>t+fE&o*EW2uhY|F4bO
zf1lb0mZT;bFQzWPs6dL?NYFoU7}#t4iAdx_B+x*SUxSmgX`R?O2?FV>G7x%t7fy4{
z)XD}!T|Z-%TyIsv>pH6>(UzaNsu9D{1eUf#$T7ipNxb|3>>p)!URvNwrB?qJ7P4w-
zym3-^h5kS2y)EhgLGN&|&;LG4DM?3Ne-!TV@m1?HiF_BGser~1#H&_*?+A`#-ktSd
zwL%cs#{#>r7MUq29Ch$@+yqJZy1MfJbQ_yn_)4l55_v)5mvnh2uUTY89)qWPk;Fb0
zFcb_6n9S89gcuD15=}m;cjj3&=$`Akiu4uVn{Fdy*3Nm5@<r;m8t|cXM@`@(e?^Gn
zcnt!j;+X=>Xx)G+$BXW+j~F3CP024`h?v&5%Z0ac2=hU&S9ueW_3v+HdQ-KTHZ2D)
zvN0IkS8)m#Ey|Q~am}a)+$2r&FBbul%a#0@#^KPP=-&wyYGsmwn(8dY7s@^taTMZm
zO=y;HkTQ7_0#zU@CQXBhIT|kFe~W9<-V*)FQLFMcN2L^kQZRYWEEwn-_RNfYZc?3G
zqFa&eRchO(m|rtc9%8p$wAdMqvmFctIY3Bnfzd8ep=r7$20cDj-r2#r_4NdvNcYJQ
zIpEN=7h7T~Oy>g8b#4PjJ)~@#Mu9yX`Q@bz*S_qeEcO42+etQd09Wk)e;XY34$A)D
zQGf6MJxg&MCw1&ptS^K}*c`jeud}&zIVOp;)6mSDYwFBtUru^dsS}rXyFl-^Dr|SM
zcP@ReJID*Ev%Gg!<D6NCx$wz~E?HBLtkxm3BFov-%xPbw)6%tOY5ASK{}V+ygI|D`
zTdEd8=W=~nn_QaEwJi8cf6WSRMt)(ua4f5yOm6r&f2Qot)O#~!G!}QwJkRZ3v6FvM
zA%j)irdV-|im!99G6==o?XuyQoWpg7tV8bkY_N;eZl5|<%F9Z&4=)FA`Ti{zwcBN`
zs^{A>vi$zO1}F=gt(Icm+>32lJ6>9m<k_N}XRS(Oxv^CyOA=Yfe;UQLmSw564zsM~
zsaGBKIzN4}1-qHEp4*gJ^mupRvDd=3deiyZ#;49Z?+tzT9pNlWHA0w8awOMeZ#%P-
zLA&zMkrRP^p8@A5-~agT?Cj=zIQ)yHVgT3&=78DAvARZsJe~yz+zW;sZM2=#V5)sy
z`N|N@$^+DVWd=}qe~0v*LKjKDRsP@M)cd^dswYqV!rCVXXr^{!tNq252~c~+uCbWv
zew2D>c6?LsGYH2gEFX|qZ2YomjDiDWDwevN(<1#rvBPDZROl50>|aH}{DxBT6A3_X
zZ7G;XT|6A)5ebMOP#QKuKBIB@nS<W__FF|Iq&wOieK?|le?}<mf!nP@SOU5#o5ji-
zs)Jo&Y@!T`VqYf~x~7^9N01O`B2Er?rGnm8?8KCb6T6R8>}|FUx!6$+ZFVwPOEQbF
zHxbMwq9;qe+-@M4h2DN6a>>I{6JeB2!A?c60<bCuvdV_ywh8pIXszbX)KjwYq}@t8
zvpOL%+xu(Ge`e&zltkj>`yWq-A3mL5o?TykxV*I)a&!J>A^yFN`p>na&7Ib<W7Ywp
z#ZDUoK|f6wr<P{sERLhZONw31uuErlO2DMjsSt7Dcj}`K+v%j#H0v7wDZPss71X1F
zi*8S^H|a)^yjIMnN<+-nec`%{F$od|w^IguN&{aXe-z2eREYRz5M`|pYu#5v05vw-
zJGllYI5>j<&xhdA$mcFP=oRW1tFn0AFTRd}5$f9;*Lr|?_P4u%Nks15Znw_tE!Dj-
zBQp}fBzF)dE6=2upUBTFHEt@7Rs<r9xA$UsII1y`di<7UrFCEs#$v9{`#n5XT2y;l
zsQ%I+f7ll-E93u0%Wrcdz^eVfgF$)!@7v@4(LVnF9K~^*Lb%@?BTrA3&-x}ia60^;
zH~2131QdOOMc5t-fxYRCId7Al-HoaLAsW-G=puL8>ZM8YKUG%Be|olVi!ER)@_$Ez
z!C^W7_x5mq|If3On*CpkZC~YGU+d=vQ;>`Oe?(7|8Z7PdQr5n>$;&tZYwz*O=Nj_>
zH%TGdsPR-8L>sQ!d|O(1rzr*70YzI*Dm|cR-_NvB0&L~hsBKb--*iGLg}hD%Q=R;O
zvP@AaES&l24HrSD?p@t7NMAjq-2Z*F`MILar2y5=;>}8gH;*)LA5S=S?<A+Gf7Z`1
ze>IC^FJDEcYI@yxb2?P})ldyY!*V~sZUtl|f-2M6nrtX6Pl3Ie;1qduePJ?pSuAE#
z<z-_mrYGP3cy{yQ_w$=iH|IZp8eX0L`sw=J?Js|67D<GA?N;TBN5c?De)+NNNBzBH
z9k>TegY7z=K?$i3Cw5RJV^R~ZJYF8Jf823Ia+wCnz}bdx2WxTn3^DS@x9;xR@*nx<
z@$v3X8%2J1SG#gw(Z63mzCZtTd3ARF>GIvhxvghEF&b9+WK1CNZ(v+~W8P_dE?rb5
zUYF^e8D{=gs#u#$Zk{mAIS<9YF84js<^^tC1ted23u|B@z)G92&;Gq!_D{Ps8B6ni
zn`GbWvxSw4vIoRJ`TobEP?syJ1f-MI4k>>Vi;7!%Y14N3!?k?O%`%7k{M~M?<x^Or
z(!JQ#3JuKFY6Fw{ElZ8V5)=RUc=r^BD?9r;=1xpva4ICo0lK^E+{sFJxn_&ZXt`w-
zg_QhFaL9J0Ca;m00tY1y9AO5C3laortim@3$io;5qH?qIH?qb22L>qN>T0<>FdBaa
zb7>USg$L9JX&ntj`Dg?JBXjsZy$j)V_yJ|t-Zr7Dgt7&3tId~EcztY|%;k3Lx+NRr
zc~>x@I^ZcgT~tTwab#0&ToYM|HFw6AJ7URo*l`;&7h$c%mm3k>j&F$<z6{H9t!q|L
zpVFJSi)vWs3eE^qA?qsP?P`DX-mHIx+-e)Pro@t^<g(sfu~U6^>npw@<G;Ez%KvWp
zdk`z~zXyZfQF;Hz;AnsU)3cOPB1#<&+hz7w1Kj6+?X-BR%x@KwF8>P$M|YCvl`UGC
zX>5LM)KGrg6Qjj^YtuBkKH9m%B)V|}zU6Fpg&KN>zUq^c+vdZYYzp3I!@qy+vsYW@
z!k;Hwt!3>c&PMI?-OGFSa`|riY2-?^?XtsFhJTJ!x25t|ljdF()<0?zxZmjL^_FRE
ztwXYiL)Szcy0sC9&CY-CHg&wgS<_7t$K8$6#$~m<Pa5x&#%rH3t;-u*q3$wqyie$U
zy9wRZHsWhd=I-XW{*tq$&wPL2vtm}QMuyQCPq6;!=l8@{VS7R&99X-c+9>_8*2&Pa
zIa(`O*f4Xkz8BFbZP8#7Ht*s_J*b(3tqHYAb#2zIic7Ok_<R+mHvhv$*mF!0=t=WG
zy@SKIZ!7tq!~O67JWHvBW{VdWDq&VKT0SVeI2k-FG+CYvT5&JpE>nL)Pto5jD!<E~
zK0Ksrh;kA|%HXm&Q15Xfrj(KYDAig$x2=D$>4pZde5eYRF?|l)3%Pg*^7r?tD;OIO
ziY0-z(~k7Mer7a@xr_eUZvU%QatQv}j^%i`fJhkoZYs@yjZ}pRi1r)Q4hUC&)z3P~
z51KUclP|3msCFA5^a6iO!p2y2veAaCczE81+0^g?%z49cHXIYoAQBr;&Wz>_YR7fx
zRu9YLM9Ria2ecJHk5cB7C@&K>97<}RhG^E=Hz^?tzJDp<t_tmY68R*WG#C5kLSDL`
z(-|35jg#-m=>LN!jFelIYv%v0b2)Ak<tmktS?yI7-R9~IEhZmv37K;m`=!nIzU<4s
V?90aG{{jF2|NjD7=Fk9+001qx3E2Pu

delta 4652
zcmV+{64ULsC6pzQJAXZUZ`(NX`?rC92f|%o_wHBul}GOc<c~JV?iPDZf;ip7;&Lcx
zX>9XXNz{>)8(-Gn{lJH;7iG(jr0t!#*v6K~8FDx;&XBaniQ_Xe1Lp8>)IFbKCOUH*
z2H)+k^m@JC>G84p+w1kpe|!DY<L~;%CxfGYzu%Y7`^UZB@qc%yx5qxzmV^t;zU%Fb
zt30@Gq~MtR28<ILxoFmJ;W*BH?evd2y_OH$V<Z;p;qd)ibUu8CE)>t8F=go2WCSb%
z0lXFA5L{H`sn)Cv@Jo;RP_j~z{}~Pv;Cog8tL4An>m3iu@;^8_J;?ua6cXYIxGjW6
zn8Pi^)I|&?gntV*?|k|T?-1JMWa4l^8J<83As&uob%YqiloLVOd}Wg^4@Ys3Oh}|!
z2|URZfqW1rL2yF@;>}(3ZhS?>4Fe95Xd$UbZWx^rsXc&ghE?))oHfqjKI)uy`s+{!
zWCjs%e#7VpHp84Yjb+mu-a)6|Uq9xE`k-~|t;T`37=O3~l1ep8!4$gk*GANj8GV>n
z(NCrxlW0FJ6~DvDgsX0RCXr7+^OXJ%^Wv;`2CLDwIItP<;Em_eBoY$0#{dg(kzfg+
zm+0?Ph}7p-$katxSLWz52?8_%)5KTSX-<<48iGKAqA?CQATpK@(Ptc~hY1Jyogw-;
z>PUPv5|cXuJAaJ^NeDxM1vemDxjrsIRr}gf(-sg9a~DaL_amNC{X9sx0QM7MT>PDg
z=`WOvD-a01M0kctAaNsY4P0~qW1IxyRb8v%ixxs52u3`9Lz!^V;IF60$99>T0uID9
zt0uXFCDC>C9!qepp0V`dxgOa~fFsCW1$6Q^m_gv8lYbUMpDFu9qRD&75Eq2GsNEG|
z+*YLEG+`cajoPMMWFJE!c=}BaBvdSa)a$(`<|%`JCBXBwyf|@DzZX`T4boPYvDYK(
z?}%)vqU%u%c0z&2V-gWDchTd*NW%~U@C0S%k)Q!EEL}ze)<K_O?xMDm6-EQ-WZFaO
zl2A=}+karBv1~1&wJ#qC7d(9d<1u)`MeQp(^rqk^0kj*zH&PKx-g$B?&JJi=O1DTE
z!Ve#!r7UUzF7kQ<fjVk1TdjaZ$wQ`c{H5aZ`Bg!+$foEe@-c)o;vkgfc}~3|sU3iD
zQFn$}Hz1>~d17ZdE9Fai;8`WJ*1CVQ%AjQoet&^|w4Hs4K12a<uB<H%7+`;nrr4M4
zgp_Z9NW=vW0`OlU1E-U^9UTMhOxb<HRnG_mzlJZR=V9Z`CCmJ9?%vNZyAR0d-aPz4
zu|r5_Fns^^J&t1%O)e5fqREFSRQ^XQ2`lwkNeNKCt%BK!HBYvh#N%C9b4Qd<$C?I3
z(SL=luxH9q(j!dS&s35Or=84EB2b9u(yd%_D++Ox;2@YI9B`_D=UGzWtmDTbFKLxr
z(a}hHrA+&E?W;TV=EL1D*SGKPe!ssT{yx0BeBWNq*;17oBD5>a=%#~fwY-E28vYHB
zAkes9zC`EJSM+3e5FH~NMO5g{N#_{*zJK}?1V~H)#nk7mnEG$BT6QpjLa_ouu@BOy
z$<+(O=!Ox>h?t)Tm@5Df@q`%{UA9I%VKXv=rL-VErA*)na0!aR*hNzzV(xakMOygO
z<I+TX5DWETOeTq*iEd1NCpM^^m;r<;;MHx#`TpoR=5sC}bUbaF9FGw}JRC^uLx1oR
zSzE0l;6b2??5P|$jbqA0A}3jniY1Y%gGmGoVU8jiF-ip*%@GG7NHjqhaRcsLLz5Ur
za|91Ki~~Tf{9dZ!qDKk)4gbKU|J?8O`e@OzRN~-yG>mT;9TVwZJc@Y?F1k%3K|(N=
zd4U#(Xx)ExDaHQ;gmHic@b1<1-GAk<BOb)=IM&7gkB*N@@xPOk-pL{U_Z;PJ3M!sI
zeE&9$=@X77Mg#c}2XqcfgDVAWbY7>`x}(UOg7>N1TB~S*MZ#a9H~`E+DkQgMd@)Z1
z$Z@1;<1zN&?C}wGZb8-ST%}LZVj=sWfjJI0HtwvA<GAE)Nk|nSXt8J`$A9^Zg*QDY
zuvMj2{y$D3h=K8rh<8l|tdalz$!WhN|EI^j{z3kqqdY!#|BPlNbfwpUq$?o(fU{7N
z#hZeQ{@h(GS}j%W@*&2Nue=#4b<)q1pFNc`R`nhq9puB9M1a~n9Cc*1Hgd8z(y2fl
zon=;n+WAdqoMg@G88AkCK!1No-#hZq>5=+K!eKHVlLypxGGGw->a*^e@i)hmp(zAm
zwvs~De(CBOnEou?=c;m19)ILXFWjbLtZhOZ;R*Q8XkKbHG~w#HhQ{50d_<`f=84#;
zZMV#?Dr}mzZ<cvn(@avO!>3&}S%s=*Fi!R)ZTW`^A4_%I{=YVAe}8NnSdyA#yqvoH
zq5>&mBSC-1VPLQE2O^OVkw61Qehp5}rgdWDBnYIh%0TGpT{_J*Q!5(`b^VN4a=ldv
zubZrrL|cC5szwY)6Ij^}A;$#YCGqkDuz!@@`O*SkDz*B*u#i<t<E@jzYxMt7?{!K4
z4|+$Zhy3rel#+DRMStNIix;g=B=TK!p#mC15HDK!y(2h|d3V--(F#Fe9}DchSZ1cA
zaMZ!qaT6rr>*~t?(`{^S;R~r=NaO{HU()5Byk?OVc?_QFMH2g1z)&zOU@}*a5Mne4
zNHqDN-kE3BpnI<CD$-YcZ@P_;Sv%)J$``5MYQTrm9W{ZE6n`O(;|&Ouif0NiqjdwS
zoG!b&IbwtiH6_1%CSqFOE*IX)A<PH8UgS+g*1x})=}pyU+O!<J$i`rBU&kq2v@BD~
z#SNn#aFaC6zgz}LuGaEr8izxFpnoM)sFg_yYO1popDFuP#8HULHKAF)LCWM!2vmWr
zm^2M0=4iN#FMn=GdrR~yN3F`+9F<ZCO2OngvtXcW*fTToxk+_$iEc%<7pZNZVt&Iw
zd5GP1(PC#b&UP>q<NzVP1xC9>g{JA27_?Ya-r2#r_4NdvNcYJQIpEN=7dv7qOy?5O
zO>P55J)~@#Mu9yX`Q=L+u0z>NS?T{3x07t`0Iu2pH-G58J}LWu$EQaJ|L-}9<2b2f
zr(%5}M8f9SWqzH_t;;b<q@9Ll-ds~>PWy7wqe`8)yxRqOzg1zolf854d)+}^NS)=q
zvl{2jI?Sa{R&>dldStZ@nH5>ire;q2GM$#LHA~Cy?EN1o${G9uyxdZ?2s)SR%i849
zgsx@5Uw>*=a5M4?<E3L+^<;9x&-pWDcc$K(DWkEtYvy@w_llkT%L*B+;x@&KV^n;d
zgOx!j=5ALFzvLWlGGrZc&u4>Oq;~t%u~J@EvVC|tc&qnsxv1SPb5%XxmXYQ6_ccIS
z*le{D^Y&hB%i8hMiX_h#<veRu8q1BXGFg(yI)BzEuC**ntxcF^BTv2RsMq=F%PrW=
zob}wM%%aD;2amlLw$+=?*ET+N-g$56yYC5SQK}KbY?33nCVShNoekQRhmM>G?E4Hj
zKl}d2Hy0PTm&4(oEENO5J}?K&MvnD08szaTK;S_z>}aFyqy|&%^U7C-XjUGe<|{LR
z!hbuY_Y}HF`mOT+4yWFyO;<g6>KE2NIY2YD8(Zx!u1tX1Gj@Z;RQIFQL$l+XdY?cz
zK4JNQ#B$@8O=A=s7*ny--JBNb4~iWw>!d=j7-0W83g)+zil0aTdTUF;JZ6MX_oF%b
zXhQ>eF6?02uQ;y&U6rh2<t>GIUl^N+a(_{1>zG>CRI}j-5&})c*%7Z)(3^stm@;u@
z_i&26%{CDiJF210&ITLFRT1_!VzokWWT}_BEySwO+h>s~9*&xbk~GMB6`%^hDig~p
zTMElI(943cp0`pj#l}%~3+c@2M8IsVuQ6GXA5#*Ev+sXAAHMr|d3AAf{qE|{W`9J@
z*_Wm8_B!f6*N!%KQpS#12WOVMTnq&LG+h{4nwfJjjuH+jG&RF6otG&AlPaS^#HG)t
zj~VQyQBt$0Yy7+PE@o6vj|MKfJHOec8%6S3F`Ft4F<bX!>oUe9NEqBr8Sp6$e0@kG
zD^nrjpP{5G5Q??tsv&?Ho9&%k|9=u3TtI;5L-1(ia~B=;3U!Q4SibHTU&p`*_3e#o
zy{|m`+g-3EA`fo2TW7RZYR;IE83|yLJA{&zMr!qmJhW2drov=JAi{We|Br{G8uO&b
zZ&{F82L@p*=IW%}<D$}{+S5YyFCDx*l%31k_`k6<yW9w{ZvXFKP~QLh`hVmQ|9_t1
zI8GtlZ;p|tC(CDjlN~r8zSA3gS0@6Be#tUykA=YA^wylW$<FS^)PEO^>2>rzciQSp
zljMJ@td;-tY~2o9z}DpdP6mVHa{lji|8W1$vy__sU(0P@<y~K!=LS=d%l$-8lo~AU
z^0I95+IEju-4?HHQiwKcJbzUN(T1xw-<DS1Yf8a(K+%?yN)IU7_cLvk09(5?YL`^v
zH=R&QA#akwR44zREK^hpEN82YhD*6~_r7j1r>`DTi<m>a`nlrOr6AefBGyWTw~tlt
z9@98??<J?He>TrBHH(C=js>J@deew?I#m1BPz^-GazDU+1!OIPDu2`3nrta7Pl3Ie
z;1qdub73-fSuAH$<z-_mrf1*(cyasgx69j)x0gSE9A2OQ`tjz?-7kM?7R`hQ?N;TB
zN5c?De)+NNNBzBH9e4msgWWowK?$i3XLe8}V^R|{JzX6$-E&lQl?KVc*@kZiYjO7s
zG4jW^?(f_3ANgmoxPQObMv>p&*RI^x^zYXXZ!bSyU0+;&yn6Hg($=$|7!9j@GA0oC
zw=k~0G4HfJmoBOjudDRV3^RXgRjf@Ww@*3doQGmxSNk4m^8z=n1Cp=2gEg=aV69C!
zWFWs>22#5;D|3(AWB}_kmX(UK2gE=7{>P$Fmn*6ys9X>`6O;N5C4V!Eid%VU({4G;
zjeN}QvX_S(;(o2=Q&^+Yz1Y<X4b0Vg1C#nKD~-bn6Tev8KZW7S&i;<M6O$O63JG$6
z?(aMIveJF7*)ls@ZdpYkC4U<nvR$dkOC+YiL5TxLm;vH~1VI|B@XZ18Fvfz6NI=B=
zm25HpfdNXmx>_y|jDJSKTpC4n;Q{qQT1Nv>J{p0*$Q-^;??N~qzC+oyw@v6Oq3l51
zYV(y8-W;1IbGhB7Zpjwe>NQNL4tUB=7uC^b9NCl`H$+xq&AqYZo>+1dcHD)`MOYj0
z<yHi@<6Gf{ufnog>zWnR$Mh!dq8iq@f(yb_$ht~+yV~ErH-8%;x7voCDY0THxvF>9
z>|CGS`iif}_^&RF^1nO&9>kjb@6n)lQr`bD7#!|@dX`d3M5)7J`^^4ofQQ_#ofc1(
z`K@Bo<$vMe=w9-?vPCO1jm?jZ8p`i_VziiVZJI{cM?3eJL^p20x18;+P(#nqSABAF
z*L--Bt<8sQ_<y&3dTYmA`153|wXA)~(^ZFj_t%#1wx33>RNE~(TxIy@NOfB(e>G|D
zbz%LJCV~5{j$ZGW*48>Ci#T*m#GzXoaoFzs_kL5yTbx$iCUM-|Ds5a=%ZH@#A!)qv
zIoG<pu@&k*6UT>y?zfxJU2h}4)@1JPE-6}lzV(@pt$$X`s@2Fa8siDpKmGic_$q8q
zXoLf67gQUiKQ=nwS~f=;B?}v7E;jcf8l^27Ov3hE+^PpPbFed^mZ`4ox>a#$4hf&H
zqSWSp*a&-$Ndi4-{-<|z{Q7kz|I<JG{?D_NN@%utaiJ1sC8Ono!poDv!$OnQ*`PJ|
zBJMLa^nVon&7$)A?CIlUx`rqxQKSs6ngjJ7Ct^w&`L|N7)pOhW2b*qb0IP?pU>Vcr
zz=M#Bhai7{pSpsv@t{}|Xglpl@9SqqlbE~cAMN%(TP26!AMIF<hYN^=vG1nR4A@9j
zn1E=%LhXQX^;i9@ll-7bBR~1lT7hb}1wt>tB!6s-RVN#5xQd78ZJ13BFTk8P9B0EZ
z!3-j?1?9|WUZHkehi?6_JWix+>~%mp0rV(kK8f-&VZ))M_GyS_oqdxMvf%rt67H(d
zz9o@QqDgbHZ!YAe`#GJFLDe|<o{at<JYl5Vs$4VwZ<EV$n<!VQjLd4Us_3>?Z)iD*
iD;>z3)7W3yd>_i89Lk|=UH%gQ0RR7R1r^5tjsO5P5H3pq

diff --git a/charts/v1.13.0/csi-driver-smb/templates/csi-smb-controller.yaml b/charts/v1.13.0/csi-driver-smb/templates/csi-smb-controller.yaml
index 74ee1df145b..6450b672983 100644
--- a/charts/v1.13.0/csi-driver-smb/templates/csi-smb-controller.yaml
+++ b/charts/v1.13.0/csi-driver-smb/templates/csi-smb-controller.yaml
@@ -74,6 +74,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: liveness-probe
 {{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
@@ -92,6 +95,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: smb
 {{- if hasPrefix "/" .Values.image.smb.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.smb.repository }}:{{ .Values.image.smb.tag }}"
@@ -126,6 +132,9 @@ spec:
           securityContext:
             privileged: true
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
diff --git a/charts/v1.14.0/csi-driver-smb-v1.14.0.tgz b/charts/v1.14.0/csi-driver-smb-v1.14.0.tgz
index eae8751c5d856218a141573f1d65301fa77e0202..a837b42547ace760ce9e27d31702af627cc0aecc 100644
GIT binary patch
delta 4928
zcmV-G6Tj@VCebF4K7SiGw$I-J@*N1JK-;|;Nq%PU0RAJf-8N`r8<x{Wv0en!%#p<F
znc*zSQLJ_S-7ol<H%A&h>?B*UXe`Z;=kReJKk|^2$BE-JG6UxDaMVAYVkUZX90o78
zmj;8u;P~)R{T&Pj)xU$i<HHwwhsOs8Z}yK52gff4dxwLAgMSxju*Etwri2U3UJN$o
zRc+iil5k9Z2gV7FTr}J3;5aUP?d=`*1|1)`$4D&H!{LW_=ydoVohg|?W6IF4$p}~k
z0(d9FA-Je4Q=M6r;FoUmF6F7B|1%sUz_)Aw7VH1s;NZ<cRsZ+j9Paf0IT8u+1l$fn
zBh29%V(KCW6Mw=5oA>Vi&U=LRIhi<IP=+VaL5PPVnH?bpG37*1HeXnz&%;q1Boh*;
zQUXtMLm(f-Nf2DofOvBky&qptam9c`Bsxgikt;@LL|PAEt8tZb9p{A$ybpVW<*WlT
zg9tdkVsr$naZZcIvS@+tes6DoIpc`>pl$25=7HB}xPK&)YBfvAl&jLB4?Ip{M(^i!
z{*$T4B;UKt@;jVNxT?oz68ZEqPY2+BULN+|{$jQr4s1p|c<XsIiG<|sF~9;`Bv=CI
z75c{%BK7$-GI<f!nK}AQf&h)c6!DdNn$x6*h9HojXp936h>Yb!^chF$VZuRvXNZ1|
zdXgWF1b?GJ08G0w9*&&+nZvOeru?nyZ;m@1Ho{)D$}+cdi_#Z%^r*PShdqxIGm@Ro
z7_dl~5;=(QD1e_q{7!=;grUHK8<L$u9Wzq(x^~pC1;oSLMSC5D{D`N$ei|fP0Q-qB
zF8)Ep^cTv-1qg&*Aw0t*ki3z02QE5;F-`*Ux__xu`9%kz5CkJ0zoJaIX#anY4-f51
zH3b}qX`W3=2TP*M=mVDITs>mx!&BX|s{lukzY6H&H<&@-qN5H%pDDW|(d2^^h%>@m
z)a{Ef?y9cfG+`ca&Dv&NWF12yc=}B?Bvc}QFc^Fw<|%`JC%}ujyf|^u-XN?M+fPeb
z+JD~6Y;QwmnT>8{vA+=uJRXyXh`Ea%9*s5(AplQMW*!L|0K*b98nO<$gSm^kN>>;S
zpqE<@X-h&i;9bL!#<H}e);+%`T=4V-jK|;!7j-Y_(3^sv1ki0o-)KcFW#`GcI2*9(
zDBB`+2;YB<GF{XPT$c3~3U$z8v^oKal7IW$<oKE4^7%!{w8*0974k8JG~ytX<#|rK
zB6~Xk;iCQwvwlEEee*=VW22)}>`mc}Fx5CYP+eKw^t<v0cfdx#D3?ashe!|{AWs&1
zjUbH09C5)&G(jQYh$COu@P{hDeoChQqhWo;U`*}}%UFHcfS;u3d7pl?tCCfsDu4Fv
zSuIW@Z24x5T*m;Jl3Hl|@Ctp50^nSs2pllL{v1uQFVzGo%!5e81r7r6Un4`Om%^!@
zp?0G14B@I~gn{3nZxT`2bS_hc?@!&^8D_Tu8Qq$P-z#wl=?sP+-hIGvOrptIBE{@u
z6e?VmYWPAsT`_KyuWL9r63wHv27mEz6Vcp|<<p6#VNr(WHStU(N+R7<{7fb(a2h<1
z5`jWImvA|gRutkW!9g%bIN($fFN&n%*(8r;S<<ei=6jGt+f3ut?!^sy`|;+N%j@?y
zf85><{}|q!f9Pgomboa?3Ei47x@qG&9WUX6hQHwv1e*7&SLjq?U{6*D(SI?*QACBV
zoCN*Y_tl>uKw=6grate))PI}jvXcoEiv<+Qb&$?lPRkHRSBy|b#QZeCToHhXC(KMe
zWNE|`HX}30v<2}gWdcutOHvHRE}9AvbGP3w_k~YAE}@49u}~kzWRmES=*QG|V#C^r
z8AzWapLgP7ee@XfITsK*o`3eaj>m`~9u6e;A$W<*t!77XFVIBRR5qN(F=Zl=gDhLc
zl1SyjBm#yoM-hz}r2>uSh=UN))nUX9xl>I|av04K+~Y6~0J-veC5ww5B<;8SBbW1n
zy}@7)J$5XaICvfn<10qTM8c*AF^|DT*GVKu2nKOHqQ~7b<cs?HpMQWb4zK{;zqq_P
zANIt(*qq0*_5Xvz>iXZ&(ZO#0?^)8#6x4eD@WZ=wO`mWyF^cL#9MCx^L#OPNF%7*=
z=Y}G03f^6{w6<gdi-f;MaR8Wu)LXY>Ad4pg<T%m;@ECh=^6-Fq*P!zCF4Cvy@ln=6
z6LTDHT){~f$8iOeNPkK-BIxn4iyY@O7T$EH=ZjLK{(qW65Ch{q5pNm_Sfc-XN5^{=
z{XafD80_@_Inu*J|8HnULRUIxBt52dmnWg@7H<kJ`dk0;vC~o6&hKL!`O4`_t&?y_
ze)d$%Smk?oaO4b@M1Z<H9Q9<jE^_iW()XgCjxsAn?ftGJPJc4z<qQ}jKA=A(M2$Rj
ze4sv(aF~qcbh_*0#31t3XI(V|%jA4}3PG4pIFPkoI=d#OKTDKZH!cboN1g<$HWOnl
z6XFO@z;{OTN~xh)t!^r4Q1Qb9O0}@qiM_^hS$tJ-(|!9ki{qMNvR8V1+E;^B%4!<p
z<WJI)f2!4EX@8Ep|I<a?PhCSx_9hu;Ls!J!NOd+6^bZ^c_8fmA68R7bw6D5flar%q
z9oRSt0tx9D2tB+Rwrm($SzxI1=fYB`tqOQu<(VYg>N8grVmO+>!g6x9tVd0DUa<l8
zkFq*nTH!0H(f*g_duj%`c2IbU{XZDIso4Mh!QtM~&VT+tN2+K?(_+=*<IBz+iF_BG
zsd@hp#LG@`?+A`#-k<Hg?1Uh&j|FyLW`QZG98L7~@&c0db#{gSbQv2gd@0QfiM$~3
zE4I8>v@9|skHJ&5NMaug7z&03Oy=qlLW~9hi6$S_JM*l*=3c0}S`aJ0H`PYSOficj
z<%<-z8h`SkgrjDCAZ3W-c!ds1)iWiS_jQY2InJuPI%9-PZ%TRjOvJRgTwxWcz_7SB
z^s?w8^7{SV3~y>S)1uWme%=Pd`!Y`HqAX1*7gvmWz)j4w_%d5ZxL7Km>2ekN6a71(
zLd{H4Qd1qI_)OVdnMY~)s!g923#3Bcrh{sfm4A??Yi@-;%$DI+?0d^1QK7eLZwtMY
zQcwn_D48V(-5{R1lP?UaQ;2h`ZhM*f_9^B%`hvRsZrNk!eVlJ#DCq%0dJBw(M5UtX
zmKgN-SbJwD>o(^Tcp~AG>EwVz+gfbMsWhA!qpQOHi)KpsE{&3SIP%Mvc3iu(m9!B5
zm4A1WtPKE{?El+8*dJ8!-_c;V|Myvv<2Wg>Q)_)8M8XE_a$IMFbp;`bG-zmt=GuZe
zjpZbwN<mx^c7fh*Rod-juUz_GSCE$?Oht6o0M4w<%rIFQlC?!-jeyL`tl(2~(4Iw|
z(z#}3`klZ36Ga7wU!qr-s+LI?LSlKDLVq;PwM_Uc#Y!-vI5EzEWgW>BnqR;(RXEd(
zW~yu~aLqg~Y+kW<f0iMqRo<mo14iZ71zI_Ua)@(L^DE$Rl_u*Y_hQi0MQXE8lPDE+
zCEtcuptpGYmW#UGs#G=0ZIxMZdtVEdrM*@QIj@gmJJyO<W+X+isD>l!+E^`Y)qlx~
zMmC8?d9G!dYONwHD<SndP;bKN*%s_}V7;&>vy6DRfY=*pThVkex53m!@ZJ);Z;5AF
zs}aI%Qs{Es?OkVfvfr&ebmTx_-)F%2$#*}zJv+NT9}a)CWDEfNz#K699hT>45y!I-
zfqTKQqn);sI!v`4s+bv~S+#*$u76AeO7D=~Qs^RyTjl>fPQANTXFbK<FU@@lgl1|p
zw%T4?8vwPn>I#dgu1BSYX2Uo2?m##`VZ{ZBY=4x^Vw3=k$yljw!HVqdmn&SgNu^pb
z!2V?v%&#dGKal|R4v><2)XBp!9+7|u0+nVX<TDyqpE>C5Z@<+{Lb~zG(SL^{T3CeA
zR<Z3GgaxGQx>?S=ra9Oa$2P{GtoBW6p>wLya0Cf~CgS9P*D_3nh#iRhn371G1k}TU
zL{qLEFO_Sa??^6JT2r2#?60JyW!mc~=>j#Bsac2DP|{LuzY!hf;i!#bN`SCcb*vGr
ztAxz5rs}Ojy{cx*r87lMHh-D4du(TR(x60Ur+<SBO?C0RA5MqwKb>EkU0uGvxUo5P
za}*~t1%saYuR(VU2Y2k8^<q)B>&8&fPt%F2rI<OE<0$o#YS+;0%JH2Fv6!;DLT4CM
zpL%H1E~{rYSt{>hMg{d~;G&z;tHL|$9%h}!m;?!fn<)c6rGc*xYk%ZPTGO9FRMk;g
zRFoOlYCW_`($@4p)t3ue-qsq+2{pmN83cGf1dm2OchSM1l*hP;?DbyxbqtJ9-(I*8
z&K2d?j_Hz!+`IjLlMh>HJYz;?B!EfbP)nYk$+A8XXsi@&t4~%2B8)eOq&yro_&D8u
z%N)_#Fm)_Oo!xtQtbdiL*R+)VORuMXYia5Fzp?C_+z7C2|L^{Ob^q_1<Guae`u}qz
z$8k!_{pJ{Xda``BXQBhA!}ofF@8Uo}83$y`_E-q)O|Q+dl>F#!O#S!Km|jL73Wt)u
zbeH_4(o+3TkDzU^1#C(D?`VJjup0k+bGVEDJxglX|CMd~s(<eKT0J(HlFarKJyB?|
zvdc>Wgz_dYgBe!d<5i3`774BsLbUb9Q$-MMyc*+eY38kl6l~}CY%!_y9G`tZ(^>(r
zrCXym2_=5h0i~4kDiKU|@c+poMU`dY9NM>>H=Vk-O*1Eb^^lq|>{gqfYqhzuD7D6V
zvs$HaV#>rx)qgy%zq-8n62z%{D<w_+vwDQ7-P-lyiFazIS6yRHn`*xrs)cG;j?r&d
zL6$P83$3lln#%GN+}kNmSw>e^CUfOOHkv9f8)Gp&`R<3a>-WE(Uw^tj|M}DK^7PkF
zS8s2A`LW$1CfsXSRZJcYLmc_l$Fd&H_m1`89xMemtABV-C8R!_*hy8KNy8H7@!}=U
zEiYm&vLHD*Tl4K?EpX3tM)CO8?QK{7BmX=;-rj1b$Zu~OXYNbt_v^=Z=btVv&(1$x
zy!~))tJzPChIKg^6A1ik7}wvJciNvzh^o}<BE4F|jNeidYtzZ~gM<a}P_FA@?2#5P
zN#imi#ed8jcmqoZEcFSyh~Jls_-RP9FxIzD#H~3(Sj#ADK>U;Mekdz-HKPhT$_cSE
z0pV!fak#*O7i(p%FYMXwF0{8!UsI%(nnHb1k>jhIikw7WRdix8aSQJ@+AL<c62?qt
z84XdnXA2#+2oBobef1%~cHZ(Syiw&|?0SY4?tf~zgGq7ALg%o+#XmmYK854T&;E|N
z6O$O6S{D=u-QM<YWv1Igu`HNcEm>zFHGdr*vRtLeD<r1CL8${rm;vH~1VOr1;hO{G
zVT=V);oSLaSz`V@1C(%e16z?8je@y!it54x>Vx!-hN65l0)de^e4pNha5{XC@>_4)
z^na_QvO(w8i!bcq)w$_zu9jOBmaGvPULu6*fTyf<*&MAVk!_`MMP?Pz+?rT!NhDVh
z$4$DqOlu{%T&u(F{1%|_MO+qJT{DCFl-|T$Hp4nrkX=JstCHR9uV0&$m|K0r#yzoM
zD!Hh3m+VxZ-TI2J$oQ{Lt>V8M{vO1V_<!%=puYcO|M1N&{`(xM5{OcV!?qdy)dY93
zUwdCXRphtMNvFTU!O^Y6d1Z-C?i$-48#O(@>50*DytQo@T_5e-Vi4WHfNwe4UF!`!
zLSOaC$xY+oZT1oGqT&BNXRkJli$71~TI=1HI2*N#eJ`%rmy3PdPbSy0Z5Ao63xE7`
zguN}9znYNuvL*hbHjDUc9mC!*#I0>ezWUHNs}KFg)ra-Yf^RpByvAA6b%MzKwL-{M
zv%Cu+?*hmxpD}HUAzP_FK@j<ljgB1sn@cBkbCLZxQ>F0NeS~u*Q1{hGa+f=VuQiIh
zowNB1&Y?c@;n1oNwK^0=V?4q7Cx4&c5&Z*dghn{9)<Bg}wxT$-jKHFZ<sWE6-EMt)
z(yrS153p^a0a?wm`qwP^YF>1ucxTJt%j)2#Rph0GIIUmBwQ5iir>%8V7Oh*aS~VoL
zww$lpk~+OL$F@<<cj33cXljiAu@Uwh69jzH_}}2*@Xecg{BQUBPtTHSOMmm_iz}5G
zQC6XPP&_*sJ}ebk91UD@FXlEwgHKW4JSwxznm#<FR=65OlRCI)4Ags^h$&^{KguuF
z&+Y3U?7F4_EN-fzWpIN7_d-q>gW~;->I%-*jbcflL5?Fq_|J?cF?Z2FyWM|vDroAT
z-B`AV3y6dPM<&w@*hpoVfPd(|M%{pL^;i9@m;9i+Mt<_8s|QtX4TfHTN!XgJ4mR6(
zl`l`QaW*-;0CV25oh{o0Gl;|*J!e|;8g=6)cFUXPaUykNs}0(Sphqe5NmSGc8xN(m
zPt$4E(KjJM3%`FU<*qC3I}-UMnzUE@_DWv4pVb)|R;@Q*B%}WWPdOMZw;I<Rd9HFf
yavS3+jggu3*A3nJ<_%?oxS*R07W+%P?_JuZUD~C!)Bgtm0RR70-=S3ikN^NbQm%0T

delta 4899
zcmV+;6Wr|4CbTAyK7ZRdw(s8t`W*;&fbHz9{ECzA6_7vLBr{XY=7Bh!#bC1tXzAGI
zjU;MG%8fV8cfa66Z^@P)Njp2{U>aK@&*9@de&iu(hZD<XWDd;Y{<wQG!%TD**!N!T
zF7<l7-qCQV{`Pvk;@@8XX!xo>Jn9_|4~B!oqgTEDuy@dZg@1ZGtV3;zxWMdHZ);w~
z#{EGO4#{u8IH7@!=KU59!_3!Cf7t1@T;L8Pp->M;=O59@=o30sGJ__Rp<kmhumA+`
zR)Br5QC_B6^CH1--R6BtQ$hdd*o%Pg*Z?fo|9<b_{XtRx2k!@a{eOu>d^`oah0qvt
zxQ3A0h{2R_!G9K=`@iuHp<Pa<78jJ^DYOvc{#a&5h(Sm>5tJ>K7U^<-9D31|1gez4
z)6@{i2VvxSSJWfU!bYDa7gSs^;1Gxwl6K^Z(K(UU1K4_8rCf(;;SBF#r?;B5N9GU!
z=U0r5VLi@q(NGr6@EvsegVl@!>Vmed*O~|3py858tbf%kCX=s9gFbLL2^oD@l=)9*
z4wHQE6U%RLGUcisUr6B6FFYQAhedwaJA>tHTO8P&IPk%7XcP#^+hKqO*hsJl&>QrR
z83gL{J7n@AtTS`;g?JtsgDK)F_q3o<2aP}=LD2+z91xkvhv*9q)We8_{LT>l5_BX#
z8VE)`4}X|;W!xWI=`)LCGfe4Q)!!VqT5OD+VwGiX<rbwcZ0S+4vkyBCCuSsDtqEWe
zF(q;k;IRikgZPblkq;w*1veyHnK~w<%5`n2Ve^QCxsCcQgxr9~y?)|FTmbutFfRT<
z#OxQ!#RUk2-XJ{3#FM;{b_X^(g$a&4@vg2^{(nUaAs+-I4!@#I*l6&-N5f&YQq2H+
zVwPr;(!rwOGC0SQoUKPJet4o=cIDv!(pMgx{vGDv+32u^&=<<?NiaQ^0&z;1joMw|
zhi%mroJPz6u31-E7g<N22p)fv4e^!8AM|?X#5`s2?+AD{mlH-d>i7Iou|Zs_qV4s}
z`hQz8OKfyKi@{bb@MJ;)A{I7!d@|ZF0uLNPnRz6r2MkNhXvkXV9u_ugD_vpKgHCEa
zq%HB)fVT}t8p_g=TKnvQaKYmjFqwcOY}CG>BWDI~<UzX;eWMkjl$~eiVr{{urEH7T
zA^h+;NOVyva9-9MDAYlN(Q0`lh#pdt<9{ZG%jFk2(;|zaH^{}{(}06emggnyitKF<
zgpIm$%(@;Kcg+*|j*Smburq^G!c^nrK(%Fc<L}BJ+yff}qg)zk7Xm@Bha6e#9RfcT
z3&aH@!4&y`1CCr>!?#6#-Iz@GN5lGx!Gt^*mZAEx1wTpAaqfPsR;5abD%iIdwSPFZ
zu;mYH<XQ&E<kUjrhd1bR-~s0fMPQEsb{A-dU8yEWVID*RF0ki;`wkg8ofuAa47Fp0
zX9!m{BMjUceUpf)O6L+)_{)iXJICzSBja21@GnXnd^(5G`Nwk{h9sDtMpDc^2fo5p
zv4$_T(*@&3`KE?*E73gMXb^|nh=1mmET2y_4U0T9FNtR?Q4;CK;%72Rfz#l590}y(
zg@ntAv?3n|5%#<V!XBrJcvd78&pLU`%aV3ACEtT2+GZNBwl8kbhtD^^TwZ^=`Th2G
z^!w=M?7W?fS>mEhC$vk#Xvd9fwVa3x>i->&!PC6oyg?@t13R)hh)xg=0)HxW<s|6G
zuB-ld9uhM^A$55xr0$0_S2Y<=u~<SOUkB-|<+Kc8bj1i|L@Z7`%oPC$c*M-qLzYH7
zVskQwL|YJ_Q6}&dxFp43VxyT5A-B8Td|$ZK;Szc{5DN8SLZ*=(iEc<;D>SUFkb(3$
z@_8%F)<=&qUvL4w<!GO4Ie&}@;$Tm5AAu9e+-i0N4+2ePO=ZJr7*Zx8ImohAEDBT}
zOafpCa}>~kQ7X`Qfj9^uT^&Z;kUP=TB!}?=!2|X~50EXt7qZysQPTdvKXW-R==XYk
z^wg@z#KCc>A6_v!Ardw{ibV)Ex{d-td@zXP2|ewXAzzi({{;A<hkpg|?#1QJ*{CBP
z#P&Q^t^Xeki|c=fhX?!hzZXe2Gf?aKqw|mPnm*xZY82Il(4z}bhECZjV;VZG)(u6@
z44nI7X>G{_77>4kLJu$pske5^Ko&=M$g-pd;30P4`0){Su0iGNT*Ob&)03=&CT3aO
zxPs$04#NT{k(5eA(0|iY8(G#DES%Y1&zGfI{lA-m7XsrQ5pEj_SfT&@!=rvd|Br@)
zqrLvWM0$Me{uRxMZ%gNlq{o!*^4OQ%;>^HCf9*a!wOT6M*+Yl}S2=yDbrKHA&yI>2
zt9*}-mYl(o08pFz<BrVMMppVp`d-x0QD&v6o!@lCN#?wq1Ak-01@u)y)WAVU2kIm7
zN6|!1r`uLa3<6hu)>SjGOwPAw;Q8r<169^bXV=8^XNfY)#zg_+z>#3J%EVNb@o|8s
z;9BEFq14E%R@W6YsQB>_#afu{#7=FwB)+P+>AwAt#BohA*()7B>#D)ZWi^el(kF4r
zuWI#Jn&bBWw0}|iu5D<^-XxP`=(5-wsm?}%{*HaGI>%Q;0v7^-2CDltIXRk@0~<!3
zCm|gJp@%oYmNi2w3ygIBR9G^#RROQ7G?Qdod}gac3<pzKT29WE^{C0t%Qm3;qpZ%i
zR`^1ywg0*Ko|-{!928z*{||ca3-*7|8}<+O_WvbPL4P~y7OS3~UbpT^;M(X^&HG0n
zUbnJ)M{pSO?!5oH<%7U37TA8B1g4~N)X~?=3rNz}*%kiNWvXD|YiV9c;CPW+u;rbs
zWsw<q2#%^n6uMZzNH8p5x=@c0V$}0UF#W9FnP=rS_e|B*f>{2&sWw7pikT%TU&Of8
zkoP4VHGk^^F+&`NYjjYoo-x6+uN(BrQBvLY86#wRQ_9O1B4+jFGOIuthS{~D*I5^l
z*6(j-cw@5}7cI{5(>561mtjm7C22;vxMI`+Zepg{m&rQ9#Y*{%m#ffM^zVoYH8Y7x
z&2*6B3uX6t9=YYKCViGI5DR&e4k}SrLK?5RWq<lGS%zD)?<*FGGQCxLo9U&Pf-*2!
z$;>(E8u3h>d}dIsOq^SF+w0i3&oI}~7u4>y^Bz0x<8%W<P7e^$TVOOK$`y^b#Gt3A
z(z|N1c6~m9rxHGyPWCu7t;Lp{a>JQ0y2|XosHc?f(#VO2CBJ-Y$F)y8NlWoxemBX+
z0Do}B{=Y%5KPch9_wV=k?<JCDSuwCvYkfWhq6*lhxULG;WrQTqprIL>YYOHxmXnAo
z260)~1$w(xZnsl)<>L3cf;<;t%A&Ixa8}vO1e4_<SyMz-3&<*&WqfK1+LNeLJl8Bt
zzti_$QIK)?IeM9?YMyi^B$k%RMAPhw34ec~SPo`nC&me|EF+mr^D}s+2xsciOp#3m
zTr<xzn^&s4Kgp2N%I{Jv0i*ou46T$xKE%1K`2}#ePLuVLdp2llBemJ5PL#5`l5WGx
z&|AKJ%SP>XQL5_Yw#Y2Iy{`ew++M4toHs|Yt;&iQW+Yj$D25};+E^@HsgnhbtbY@Y
z{9LPIs<n==tcBFeK)nv9CtI+af%VLu%sk@V0b;MEU5Tc%xecbyg7=2leMda=T8$89
z(@dA^Zf{%j<3YRh(2@gzU6%pp$3MLNaC&-uHX8j{k<kO}0<*yEcUYaHK^(7w2s{Xe
zE$y_e*kP*eP}$57%!>`wa%CEjdw+-YmO>jz+$#U?aO&KzJL}2zes1oQAv9N;vDNnC
z(g3KfRaaQdbUg|+G#kFDa}UCD3Ck`>B>SVPEJhB%n2d$$W~@kmkgssjCgp0y0K1og
zx45QM{6sv^J3w;oG41$x+m@w|HZ;)Z+(xh6s`C=kWzEWG-cXr$#j%Mh=YN&9PN;QG
zH5!&6KF~-UAMjF!nGm4`fg4g1h+~gB*ppbuu0}igny34T^Oe?==f{J!bSzJM6BS#c
zL^9QD;07v|tL=+u8286b)Ji(%ohnm_U|FDLmJJnW6Y51JSuI;JVyTj-YHw-Hk84!G
z?6R+MU$G|r@b+Z%>F(^}^ndE|)5T4dLp8@>5=HKH)PFUampL?3%~>zhBs*RV1^qOh
zBvuqNM`A3c98zg&nq4?LQy>;nR#wLZ|LGG4P1;rI6-}1HyO2>q9qQTW=Hx2#u5$md
zP7_SLh{4T_0iRLN)dwZgByHi(P|#65H?&b=8jJPN21VP#{}f*?X@7ZBTPi2B1be68
z;l&6X8o1m>2fbV#W8jn5{ru|?7@=-;;aVt_mEUSS6$RwM?sn@u&{ESEGBPI~Ofv^c
z($vT<J`>z36mF^wl?;R*ZV%?TKd$jFy8RWitICF{110Lz+v8KIM7gH9?B9ANa-Y6M
zTDksjyvsH>0<7BqJAW7y_y4{>>i72R|1Xg&%gQbHn`7kh$?|#ML<derpY#Ub<$-`a
z7D<-vu@KmqU7KSm>CxSgx}Smxy$sGXhmyW^m;9;HO8t+Iplz`QY(@O<a4;Aa<A3jm
z`}==hB-QNyO16C!cYUoN8;nUN`-z?@G+5Z>Rk6uy(>-2wTYtPZ2_aVX#&bmwt9aGM
z+v3bS4JlNe<Ex5E#pn2{_cLu209&~=YMW5vA3C5EQ(h;6sSf@>TcoJ4u$)d%8qWSs
z?AyBepT2rX&3pFi)i1SPU04{~V8vRklvp8U;<#v@H(#ILei`J%zLk=u{#if5)NJ*8
z`SL+*rq^Aij(?k4eKk}A)u=c|zgq=a$)GH>RYf*bmgnH!OmXruy1p`*D<6{4RB_o5
zi`nrHZ%?m3{dRVJcYXHr-RSb<*So6^H^2PYY#|jMG_1-dhx$Ga+~Q+dkNSJZI`9A$
z1-7erO2wxx99NSnIFp)X)}!UitUF#vU1mX2a#hW*CVyK2_e^JGk8j=Hw&g$a&(qWG
zt#*q1_O^EBzM_7=e*SoNcX4@oc6agN{H&^GKQZc;<zzy@bFX1ieq-Kge=Z@aQm>2n
zY6&xbD@|;bPHrA%%z%e{U6*5zxOh$)R}sl(-ohJHbihiVu#Y-^yQrgvG)v=+n?(KU
zqm-qLvVR7|J^tZsUa5;2Rp3)jh^;9IOY4rs1r|J8D|3Ber|Ry)>elINiquk*uP-XH
zTy;~C73r&rjw?*u(z}hei(9URG2>ZAO=R%J!j}yKlvVG(`><m(Z}}YFsBkZKIYR??
zwc5eNxMitxSmNTJo^GGRaiwQ}C)^522v(^JGJk|_Z#%a#(`}|$63{J{EVGcBzX=an
zu2AF+5;NeS)PW<+0C7P)FJ7x~%>i;h#Da{8N5tZtEV1|t0~B#}16!6D4ZMYPit54x
z>Vou+hN65l27!?|d>`M1a5DOY(pztv^sA(@Mdy}_FYV#=x#?~$mRlE=Y!KjHA%yCH
zr+=(;-W;tbkxiv>O=bnr+?iPJNF>)0$8EYfPirl?+^EB=`7J@=%eXAJx@HD-7vIF4
zH^VwskX%Drs#3Mt-@G<!F|YIuTld70spPWSU9uB>cI!L7BICb0HH!ak`Fjv6;=jXQ
zdH=^?c({-MzC<bnqSWEAT}FR3!F}wvx_>X8EAm_Bq|=|_;OI``ys|_qb&buBjhdd{
z_QYsD-r6*bu8(%^Fo<qoz#lo<UFr=zLf`et$!+7|O?E@?qv8KOr?<9@i@!|dTI=1n
zJYBVqeSdGU@9LAurEJ?pipv835@GL(%->DOd({&EVUtDtjgDb&8RFJ9Bwc;znt#=Y
zZtd#BW@o{78%EyXwCW~7<nBfx<f2*L2axvx<h9Sa*2R!3sXjvx`JRmrE&ZEI$7OSo
z{5Vsg@b`U;bS+T#-A8g)JB05win~4jM9a^@zVH#(q7SWfD2#@9iuF%Ee<b<`)Cdi*
zS6Ks9M%jw&)G~kyMa=&|8)~=9(|?m@)lPqaZ3hiVYL?W$WXad_qHD!F8wOw22S1G>
zFAc<L^D1ssgMv8itfP`>-DcG)A+e3+eBG9m>1{Z+wQ{}>zx_#5ZTydov16Ga;Iqd6
zdI!Vz@5}MO{qH}$NGdJO=P#~QW<*(q;z9A`WcVmoWO+1j#l4uj3=KX<eSg!a%r0yC
z_!wK^Vh~O0;Ic7L?{Oq%l#%}^zf?ZAuYa)XntHIjsfw1t4Hi5IIbrm&_cy95I2$*L
zMV<yZmIUEHGa7~5M*nQL|J5p>seiUZ*&Z$+5C$BXOmkpkm0=2^{SLJ~!qs2(vtIIp
z?i%^Ym98FCxeXXP9wvTcu75h%T*WJYc|sLulf&^a=MCH0uuU+BKy1)+rZw+SJFH{3
zx>*h<Qa5(mpsffxlronDS)Hijp|tjSI<0c_O-QhU-@lY{mzDM-30x9Po2z|uB`@61
zYK;x6#+xsq@&AD%jFwj#*A#iKb2)Mo<0_4jne>+p-R9;EC4;!6n;bJ1`&+y3ecGpe
V+NX`v{|5j7|NjZcy5|6p007iPw$lIr

diff --git a/charts/v1.14.0/csi-driver-smb/templates/csi-smb-controller.yaml b/charts/v1.14.0/csi-driver-smb/templates/csi-smb-controller.yaml
index 5f86404efa5..3d2eda96d3e 100644
--- a/charts/v1.14.0/csi-driver-smb/templates/csi-smb-controller.yaml
+++ b/charts/v1.14.0/csi-driver-smb/templates/csi-smb-controller.yaml
@@ -74,6 +74,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.csiProvisioner | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: liveness-probe
 {{- if hasPrefix "/" .Values.image.livenessProbe.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.livenessProbe.repository }}:{{ .Values.image.livenessProbe.tag }}"
@@ -92,6 +95,9 @@ spec:
           resources: {{- toYaml .Values.controller.resources.livenessProbe | nindent 12 }}
           securityContext:
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
         - name: smb
 {{- if hasPrefix "/" .Values.image.smb.repository }}
           image: "{{ .Values.image.baseRepo }}{{ .Values.image.smb.repository }}:{{ .Values.image.smb.tag }}"
@@ -124,6 +130,9 @@ spec:
           securityContext:
             privileged: true
             readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+              - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
diff --git a/deploy/csi-smb-controller.yaml b/deploy/csi-smb-controller.yaml
index a7951c44e1a..2457ac5d708 100644
--- a/deploy/csi-smb-controller.yaml
+++ b/deploy/csi-smb-controller.yaml
@@ -55,6 +55,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: liveness-probe
           image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
           args:
@@ -72,6 +76,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: smb
           image: gcr.io/k8s-staging-sig-storage/smbplugin:canary
           imagePullPolicy: IfNotPresent
@@ -97,6 +105,9 @@ spec:
               value: unix:///csi/csi.sock
           securityContext:
             privileged: true
+            capabilities:
+              drop:
+                - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
diff --git a/deploy/v1.13.0/csi-smb-controller.yaml b/deploy/v1.13.0/csi-smb-controller.yaml
index 94b6f34794f..b475448d10c 100644
--- a/deploy/v1.13.0/csi-smb-controller.yaml
+++ b/deploy/v1.13.0/csi-smb-controller.yaml
@@ -55,6 +55,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: liveness-probe
           image: registry.k8s.io/sig-storage/livenessprobe:v2.11.0
           args:
@@ -72,6 +76,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: smb
           image: registry.k8s.io/sig-storage/smbplugin:v1.13.0
           imagePullPolicy: IfNotPresent
@@ -99,6 +107,9 @@ spec:
               value: unix:///csi/csi.sock
           securityContext:
             privileged: true
+            capabilities:
+              drop:
+                - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir
diff --git a/deploy/v1.14.0/csi-smb-controller.yaml b/deploy/v1.14.0/csi-smb-controller.yaml
index 16b223a5561..a6b5d0e8f79 100644
--- a/deploy/v1.14.0/csi-smb-controller.yaml
+++ b/deploy/v1.14.0/csi-smb-controller.yaml
@@ -55,6 +55,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: liveness-probe
           image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
           args:
@@ -72,6 +76,10 @@ spec:
             requests:
               cpu: 10m
               memory: 20Mi
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
         - name: smb
           image: registry.k8s.io/sig-storage/smbplugin:v1.14.0
           imagePullPolicy: IfNotPresent
@@ -97,6 +105,9 @@ spec:
               value: unix:///csi/csi.sock
           securityContext:
             privileged: true
+            capabilities:
+              drop:
+                - ALL
           volumeMounts:
             - mountPath: /csi
               name: socket-dir