epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-09 11:47:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

Add crio_default_capabilities variables and documentation (#11989)

Browse Source
This commit is contained in:
Jean-Vincent kassi
2025-03-04 12:09:42 +00:00
committed by GitHub
parent 0632f23a63
commit 358bacf7ea
3 changed files with 37 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
roles/container-engine/cri-o/templates/crio.conf.j2
View File

@@ -155,17 +155,9 @@ cgroup_manager = "{{ crio_cgroup_manager }}"
# only the capabilities defined in the containers json file by the user/kube
# will be added.
default_capabilities = [
"CHOWN",
"DAC_OVERRIDE",
"FSETID",
"FOWNER",
"NET_RAW",
"SETGID",
"SETUID",
"SETPCAP",
"NET_BIND_SERVICE",
"SYS_CHROOT",
"KILL",
{%- for item in crio_default_capabilities %}
"{{ item }}",
{%- endfor %}
]
# List of default sysctls. If it is empty or commented out, only the sysctls