Skip to content

Commit

Permalink
Remove allowPrivilegeEscalation from metrics-server (kubernetes-sigs#…
Browse files Browse the repository at this point in the history
…8014) (kubernetes-sigs#8025)

"allowPrivilegeEscalation: false" blocks deploying metrics-server
on CentOS7. In addition, the original metrics-server manifest doesn't
contain it as [1]. This removes it.

[1]: https://github.com/kubernetes-sigs/metrics-server/blob/527679e5e8a103919c935d0575c20741796bc25d/manifests/base/deployment.yaml
  • Loading branch information
oomichi authored and Kevin Huang committed Sep 15, 2022
1 parent 453dbce commit 641a867
Showing 1 changed file with 6 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,12 @@ spec:
failureThreshold: 3
initialDelaySeconds: 40
securityContext:
<<<<<<< HEAD
=======
capabilities:
drop: ["all"]
add: ["NET_BIND_SERVICE"]
>>>>>>> 6cfa3bbb (Remove allowPrivilegeEscalation from metrics-server (#8014) (#8025))
readOnlyRootFilesystem: true
runAsGroup: 10001
runAsNonRoot: true
Expand Down

0 comments on commit 641a867

Please sign in to comment.