From d27cf375af7a99c36dd68917ba54cc36e3390598 Mon Sep 17 00:00:00 2001
From: Kenichi Omichi <ken1ohmichi@gmail.com>
Date: Mon, 27 Sep 2021 08:43:36 -0700
Subject: [PATCH] Remove allowPrivilegeEscalation from metrics-server (#8014)
"allowPrivilegeEscalation: false" blocks deploying metrics-server
on CentOS7. In addition, the original metrics-server manifest doesn't
contain it as [1]. This removes it.
[1]: https://github.com/kubernetes-sigs/metrics-server/blob/527679e5e8a103919c935d0575c20741796bc25d/manifests/base/deployment.yaml
---
.../metrics_server/templates/metrics-server-deployment.yaml.j2 | 1 -
1 file changed, 1 deletion(-)
diff --git a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2
index 6a404c925..b2b4858cf 100644
--- a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2
+++ b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2
@@ -67,7 +67,6 @@ spec:
failureThreshold: 3
initialDelaySeconds: 40
securityContext:
- allowPrivilegeEscalation: false
capabilities:
drop: ["all"]
add: ["NET_BIND_SERVICE"]
--
GitLab