From d27cf375af7a99c36dd68917ba54cc36e3390598 Mon Sep 17 00:00:00 2001 From: Kenichi Omichi Date: Mon, 27 Sep 2021 08:43:36 -0700 Subject: [PATCH] Remove allowPrivilegeEscalation from metrics-server (#8014) "allowPrivilegeEscalation: false" blocks deploying metrics-server on CentOS7. In addition, the original metrics-server manifest doesn't contain it as [1]. This removes it. [1]: https://github.com/kubernetes-sigs/metrics-server/blob/527679e5e8a103919c935d0575c20741796bc25d/manifests/base/deployment.yaml --- .../metrics_server/templates/metrics-server-deployment.yaml.j2 | 1 - 1 file changed, 1 deletion(-) diff --git a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 index 6a404c925..b2b4858cf 100644 --- a/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 +++ b/roles/kubernetes-apps/metrics_server/templates/metrics-server-deployment.yaml.j2 @@ -67,7 +67,6 @@ spec: failureThreshold: 3 initialDelaySeconds: 40 securityContext: - allowPrivilegeEscalation: false capabilities: drop: ["all"] add: ["NET_BIND_SERVICE"]