richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

Fix: CRI-O default capabilities follow with the upstream (#12018) 

* Fix: CRI-O default capabilities follow with the upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

* Docs: CRI-O default capabilities follow with upstream

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
pull/12023/head
ChengHao Yang 7 months ago
committed by GitHub
parent
6d4714b66e
commit
7c611890c3
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
2 changed files with 0 additions and 4 deletions
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 2
      docs/CRI/cri-o.md
  2. 2
      roles/container-engine/cri-o/defaults/main.yml

2
docs/CRI/cri-o.md
View File

@ -88,12 +88,10 @@ crio_default_capabilities:
- DAC_OVERRIDE
- FSETID
- FOWNER
- NET_RAW
- SETGID
- SETUID
- SETPCAP
- NET_BIND_SERVICE
- SYS_CHROOT
- KILL
```

2
roles/container-engine/cri-o/defaults/main.yml
View File

@ -106,10 +106,8 @@ crio_default_capabilities:
- DAC_OVERRIDE
- FSETID
- FOWNER
- NET_RAW
- SETGID
- SETUID
- SETPCAP
- NET_BIND_SERVICE
- SYS_CHROOT
- KILL
Write Preview
Loading…
Cancel
Save