Fix: nodelocaldns capabilities usage (#12398)

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
2 months ago · 8d275dcb4f
2 changed files with 6 additions and 2 deletions
--- a/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
+++ b/roles/kubernetes-apps/ansible/templates/nodelocaldns-daemonset.yml.j2
@ -59,7 +59,9 @@ spec:
          name: metrics
          protocol: TCP
        securityContext:
-          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
 {% if nodelocaldns_bind_metrics_host_ip %}
        env:
          - name: MY_HOST_IP
--- a/roles/kubernetes-apps/ansible/templates/nodelocaldns-second-daemonset.yml.j2
+++ b/roles/kubernetes-apps/ansible/templates/nodelocaldns-second-daemonset.yml.j2
@ -44,7 +44,9 @@ spec:
          name: metrics
          protocol: TCP
        securityContext:
-          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
 {% if nodelocaldns_bind_metrics_host_ip %}
        env:
          - name: MY_HOST_IP