External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-05-15 05:17:38 -02:30
Code Issues Packages Projects Releases Wiki Activity

Error in nginx when starting registry-proxy (#4785)

Browse Source 
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.

The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID

Signed-off-by: André R. de Miranda <andre@miranda.work>
This commit is contained in:
André R. de Miranda
2019-05-20 15:27:15 -03:00
committed by Kubernetes Prow Robot
parent 5d9946184a
commit 4bc204925a
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2
View File

@@ -17,7 +17,16 @@ spec:
privileged: false privileged: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
requiredDropCapabilities: requiredDropCapabilities:
- ALL - SETPCAP
- MKNOD
- AUDIT_WRITE
- NET_RAW
- DAC_OVERRIDE
- FOWNER
- FSETID
- KILL
- SYS_CHROOT
- SETFCAP
volumes: volumes:
- 'configMap' - 'configMap'
- 'emptyDir' - 'emptyDir'