From 6cfa3bbb22232c694582c3a87070eb9d43608ccc Mon Sep 17 00:00:00 2001 From: Kenichi Omichi Date: Mon, 27 Sep 2021 23:54:43 -0700 Subject: [PATCH] Remove allowPrivilegeEscalation from metrics-server (#8014) (#8025) "allowPrivilegeEscalation: false" blocks deploying metrics-server on CentOS7. In addition, the original metrics-server manifest doesn't contain it as [1]. This removes it. [1]: https://github.com/kubernetes-sigs/metrics-server/blob/527679e5e8a103919c935d0575c20741796bc25d/manifests/base/deployment.yaml --- .../metrics_server/templates/metrics-server-deployment.yaml.j2 | 1 - 1 file changed, 1 deletion(-) diff --git a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 index 8cb77fb73..d141df366 100644 --- a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 +++ b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 @@ -67,7 +67,6 @@ spec: failureThreshold: 3 initialDelaySeconds: 40 securityContext: - allowPrivilegeEscalation: false capabilities: drop: ["all"] add: ["NET_BIND_SERVICE"]