C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Error in nginx when starting registry-proxy (#4785)

Browse source 
Error starting nginx because in requiredDropCapabilities is dropped all capabilities.

The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID

Signed-off-by: André R. de Miranda <andre@miranda.work>
This commit is contained in:
André R. de Miranda 2019-05-20 15:27:15 -03:00 committed by Kubernetes Prow Robot
parent 5d9946184a
commit 4bc204925a
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
roles/kubernetes-apps/registry/templates/registry-proxy-psp.yml.j2
View file

@ -17,7 +17,16 @@ spec:
privileged: false privileged: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
requiredDropCapabilities: requiredDropCapabilities:
- ALL - SETPCAP
- MKNOD
- AUDIT_WRITE
- NET_RAW
- DAC_OVERRIDE
- FOWNER
- FSETID
- KILL
- SYS_CHROOT
- SETFCAP
volumes: volumes:
- 'configMap' - 'configMap'
- 'emptyDir' - 'emptyDir'