diff --git a/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2 b/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2 index 35b6f0eeeb9b8c85c8b071403c0708ed0e8e6f3d..8033a2641ee17e3af3047d1acbba634bf4cced75 100644 --- a/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2 +++ b/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2 @@ -104,11 +104,16 @@ spec: imagePullPolicy: {{ k8s_image_pull_policy }} name: kube-vip resources: {} +{% if kube_vip_lb_fwdmethod == "masquerade" %} + securityContext: + privileged: true +{% else %} securityContext: capabilities: add: - NET_ADMIN - NET_RAW +{% endif %} volumeMounts: - mountPath: /etc/kubernetes/admin.conf name: kubeconfig