Revert "Drop linux capabilities and rework users/groups"

2026-03-09 11:47:47 +03:00 · 2017-02-06 15:58:54 +03:00
parent b7bf502e02
commit fd30131dc2
48 changed files with 81 additions and 413 deletions
--- a/roles/dnsmasq/defaults/main.yml
+++ b/roles/dnsmasq/defaults/main.yml
@@ -26,16 +26,3 @@ dns_cpu_limit: 100m
 dns_memory_limit: 170Mi
 dns_cpu_requests: 70m
 dns_memory_requests: 70Mi
-
-# Linux capabilities to be dropped for dnsmasq k8s app ran container engines
-dnsmasq_drop_cap:
-  - chown
-  - dac_override
-  - fowner
-  - fsetid
-  - kill
-  - setpcap
-  - sys_chroot
-  - mknod
-  - audit_write
-  - setfcap