Error in nginx when starting registry-proxy (#4785)

Error starting nginx because in requiredDropCapabilities is dropped all capabilities.

The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID

Signed-off-by: André R. de Miranda <andre@miranda.work>
This commit is contained in:
André R. de Miranda 2019-05-20 15:27:15 -03:00 committed by Kubernetes Prow Robot
parent 5d9946184a
commit 4bc204925a

View file

@ -17,7 +17,16 @@ spec:
privileged: false privileged: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
requiredDropCapabilities: requiredDropCapabilities:
- ALL - SETPCAP
- MKNOD
- AUDIT_WRITE
- NET_RAW
- DAC_OVERRIDE
- FOWNER
- FSETID
- KILL
- SYS_CHROOT
- SETFCAP
volumes: volumes:
- 'configMap' - 'configMap'
- 'emptyDir' - 'emptyDir'