mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-09 11:47:47 +03:00
Revert "Drop linux capabilities and rework users/groups"
This commit is contained in:
@@ -8,9 +8,6 @@ Restart=on-failure
|
||||
RestartSec=10s
|
||||
TimeoutStartSec=0
|
||||
LimitNOFILE=40000
|
||||
User=root
|
||||
Group={{ etcd_group_id }}
|
||||
SupplementaryGroups={{ etcd_cert_group_id }}
|
||||
|
||||
ExecStart=/usr/bin/rkt run \
|
||||
--uuid-file-save=/var/run/etcd.uuid \
|
||||
@@ -23,11 +20,6 @@ ExecStart=/usr/bin/rkt run \
|
||||
--set-env-file=/etc/etcd.env \
|
||||
--stage1-from-dir=stage1-fly.aci \
|
||||
{{ etcd_image_repo }}:{{ etcd_image_tag }} \
|
||||
{% for c in etcd_drop_cap %}
|
||||
--caps-remove=CAP_{{ c.upper() }} \
|
||||
{% endfor %}
|
||||
--memory={{ etcd_memory_limit }} --cpu={{ etcd_cpu_limit }} \
|
||||
--user={{ etcd_user_id }} --group={{ etcd_group_id }} \
|
||||
--name={{ etcd_member_name | default("etcd") }}
|
||||
|
||||
ExecStartPre=-/usr/bin/rkt rm --uuid-file=/var/run/etcd.uuid
|
||||
|
||||
Reference in New Issue
Block a user