External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-31 14:36:20 -02:30
Code Issues Packages Projects Releases Wiki Activity

Remove allowPrivilegeEscalation from metrics-server (#8014) (#8025)

Browse Source 
"allowPrivilegeEscalation: false" blocks deploying metrics-server
on CentOS7. In addition, the original metrics-server manifest doesn't
contain it as [1]. This removes it.

[1]: https://github.com/kubernetes-sigs/metrics-server/blob/527679e5e8a103919c935d0575c20741796bc25d/manifests/base/deployment.yaml
This commit is contained in:
Kenichi Omichi
2021-09-27 23:54:43 -07:00
committed by GitHub
parent 30cd91dc6b
commit 6cfa3bbb22
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2
-1
View File
@@ -67,7 +67,6 @@ spec:
failureThreshold: 3 failureThreshold: 3
initialDelaySeconds: 40 initialDelaySeconds: 40
securityContext: securityContext:
allowPrivilegeEscalation: false
capabilities: capabilities:
drop: ["all"] drop: ["all"]
add: ["NET_BIND_SERVICE"] add: ["NET_BIND_SERVICE"]