Revert "Drop linux capabilities and rework users/groups"

2026-03-09 19:58:07 +03:00 · 2017-02-06 15:58:54 +03:00
parent b7bf502e02
commit fd30131dc2
48 changed files with 81 additions and 413 deletions
--- a/roles/kubernetes-apps/ansible/templates/netchecker-agent-ds.yml
+++ b/roles/kubernetes-apps/ansible/templates/netchecker-agent-ds.yml
@@ -23,12 +23,6 @@ spec:
            - name: REPORT_INTERVAL
              value: '{{ agent_report_interval }}'
          imagePullPolicy: {{ k8s_image_pull_policy }}
-          securityContext:
-            capabilities:
-              drop:
-{% for c in apps_drop_cap %}
-                - {{ c.upper() }}
-{% endfor %}
          resources:
            limits:
              cpu: {{ netchecker_agent_cpu_limit }}