epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-14 13:54:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix: CRI-O default capabilities follow with the upstream (#12018)

Browse Source 
* Fix: CRI-O default capabilities follow with the upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

* Docs: CRI-O default capabilities follow with upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
This commit is contained in:
ChengHao Yang
2025-03-06 15:55:50 +08:00
committed by GitHub
parent 6d4714b66e
commit 7c611890c3
2 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/CRI/cri-o.md
View File

@@ -88,12 +88,10 @@ crio_default_capabilities:
- DAC_OVERRIDE - DAC_OVERRIDE
- FSETID - FSETID
- FOWNER - FOWNER
- NET_RAW
- SETGID - SETGID
- SETUID - SETUID
- SETPCAP - SETPCAP
- NET_BIND_SERVICE - NET_BIND_SERVICE
- SYS_CHROOT
- KILL - KILL
``` ```

2
roles/container-engine/cri-o/defaults/main.yml
View File

@@ -106,10 +106,8 @@ crio_default_capabilities:
- DAC_OVERRIDE - DAC_OVERRIDE
- FSETID - FSETID
- FOWNER - FOWNER
- NET_RAW
- SETGID - SETGID
- SETUID - SETUID
- SETPCAP - SETPCAP
- NET_BIND_SERVICE - NET_BIND_SERVICE
- SYS_CHROOT
- KILL - KILL