Merge pull request #911 from bogdando/DROP_CAPS

Drop linux capabilities and rework users/groups
2026-03-06 18:17:47 +03:00 · 2017-02-06 12:05:51 +01:00
parent 9bc51bd0e2 cb2e5ac776
commit cae2982d81
48 changed files with 413 additions and 81 deletions
--- a/roles/dnsmasq/templates/dnsmasq-ds.yml
+++ b/roles/dnsmasq/templates/dnsmasq-ds.yml
@@ -26,6 +26,10 @@ spec:
            capabilities:
              add:
                - NET_ADMIN
+              drop:
+{% for c in dnsmasq_drop_cap %}
+                - {{ c.upper() }}
+{% endfor %}
          imagePullPolicy: IfNotPresent
          resources:
            limits: