Revert "Drop linux capabilities and rework users/groups"

2026-03-10 04:08:02 +03:00 · 2017-02-06 15:58:54 +03:00
parent b7bf502e02
commit fd30131dc2
48 changed files with 81 additions and 413 deletions
--- a/roles/kubernetes-apps/ansible/templates/calico-policy-controller.yml.j2
+++ b/roles/kubernetes-apps/ansible/templates/calico-policy-controller.yml.j2
@@ -25,12 +25,6 @@ spec:
        - name: calico-policy-controller
          image: {{ calico_policy_image_repo }}:{{ calico_policy_image_tag }}
          imagePullPolicy: {{ k8s_image_pull_policy }}
-          securityContext:
-            capabilities:
-              drop:
-{% for c in apps_drop_cap %}
-                - {{ c.upper() }}
-{% endfor %}
          resources:
            limits:
              cpu: {{ calico_policy_controller_cpu_limit }}