External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-01-11 01:57:37 -03:30
Code Issues Packages Projects Releases Wiki Activity

Fix: CRI-O default capabilities follow with the upstream (#12018)

Browse Source 
* Fix: CRI-O default capabilities follow with the upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

* Docs: CRI-O default capabilities follow with upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
This commit is contained in:
ChengHao Yang 2025-03-06 15:55:50 +08:00 committed by GitHub
parent 6d4714b66e
commit 7c611890c3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/CRI/cri-o.md
View File

@ -88,12 +88,10 @@ crio_default_capabilities:
- DAC_OVERRIDE
- FSETID
- FOWNER
- NET_RAW
- SETGID
- SETUID
- SETPCAP
- NET_BIND_SERVICE
- SYS_CHROOT
- KILL
```

2
roles/container-engine/cri-o/defaults/main.yml
View File

@ -106,10 +106,8 @@ crio_default_capabilities:
- DAC_OVERRIDE
- FSETID
- FOWNER
- NET_RAW
- SETGID
- SETUID
- SETPCAP
- NET_BIND_SERVICE
- SYS_CHROOT
- KILL