From c8d95a1586e803d131cff1b5a964f7192b87370f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andreas=20Kr=C3=BCger?= <ak@patientsky.com>
Date: Tue, 11 Jun 2019 08:34:16 +0200
Subject: [PATCH] Remove dnsPolicy from PSP (#4864)
---
.../ansible/templates/netchecker-agent-hostnet-psp.yml.j2 | 1 -
.../ingress_nginx/templates/psp-ingress-nginx.yml.j2 | 3 ---
.../registry/templates/registry-proxy-psp.yml.j2 | 1 -
3 files changed, 5 deletions(-)
diff --git a/roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-psp.yml.j2 b/roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-psp.yml.j2
index fec4a0beb..32fb0c1a0 100644
--- a/roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-psp.yml.j2
+++ b/roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-psp.yml.j2
@@ -26,7 +26,6 @@ spec:
- 'downwardAPI'
- 'persistentVolumeClaim'
hostNetwork: true
- dnsPolicy: ClusterFirstWithHostNet
hostIPC: false
hostPID: false
runAsUser:
diff --git a/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/psp-ingress-nginx.yml.j2 b/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/psp-ingress-nginx.yml.j2
index 7bf4bbb16..0eac6aa2c 100644
--- a/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/psp-ingress-nginx.yml.j2
+++ b/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/psp-ingress-nginx.yml.j2
@@ -26,9 +26,6 @@ spec:
- 'downwardAPI'
- 'persistentVolumeClaim'
hostNetwork: {{ ingress_nginx_host_network|bool }}
-{%% if ingress_nginx_host_network %}
- dnsPolicy: ClusterFirstWithHostNet
-{% endif %}
hostPorts:
- min: 0
max: 65535
diff --git a/roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2 b/roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2
index 1989a4ef3..c7375336a 100644
--- a/roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2
+++ b/roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2
@@ -35,7 +35,6 @@ spec:
- 'downwardAPI'
- 'persistentVolumeClaim'
hostNetwork: true
- dnsPolicy: ClusterFirstWithHostNet
hostPorts:
- min: 5000
max: 5000
--
GitLab