epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix error metrics server capabilities name (#7905)

Browse Source
This commit is contained in:
Sergey
2021-08-25 22:06:15 +03:00
committed by GitHub
parent 6b5da84014
commit 89993e4833
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2
View File

@@ -70,7 +70,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
drop: ["all"] drop: ["all"]
add: ["CAP_NET_BIND_SERVICE"] add: ["NET_BIND_SERVICE"]
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsGroup: 10001 runAsGroup: 10001
runAsNonRoot: true runAsNonRoot: true