Fix: CRI-O default capabilities follow with the upstream (#12018)

* Fix: CRI-O default capabilities follow with the upstream Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> * Docs: CRI-O default capabilities follow with upstream Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com> --------- Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
7 months ago · 7c611890c3
2 changed files with 0 additions and 4 deletions
--- a/docs/CRI/cri-o.md
+++ b/docs/CRI/cri-o.md
@ -88,12 +88,10 @@ crio_default_capabilities:
  - DAC_OVERRIDE
  - FSETID
  - FOWNER
  - NET_RAW
  - SETGID
  - SETUID
  - SETPCAP
  - NET_BIND_SERVICE
  - SYS_CHROOT
  - KILL
 ```
--- a/roles/container-engine/cri-o/defaults/main.yml
+++ b/roles/container-engine/cri-o/defaults/main.yml
@ -106,10 +106,8 @@ crio_default_capabilities:
  - DAC_OVERRIDE
  - FSETID
  - FOWNER
  - NET_RAW
  - SETGID
  - SETUID
  - SETPCAP
  - NET_BIND_SERVICE
  - SYS_CHROOT
  - KILL