try removing cap

GiganticMinecraft · Dec 15, 2023 · 558e637 · 558e637
1 parent b398795
commit 558e637
Showing 1 changed file with 0 additions and 32 deletions.
diff --git a/...-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml b/...-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml
@@ -20,38 +20,6 @@ spec:
           requests:
             cpu: 100m
             memory: 512Mi
-        securityContext:
-          privileged: false
-          capabilities:
-            ciliumAgent:
-              - CHOWN
-              - KILL
-              - NET_ADMIN
-              - NET_RAW
-              - IPC_LOCK
-              - SYS_MODULE
-              - SYS_RESOURCE
-              - PERFMON
-              - BPF
-              - DAC_OVERRIDE
-              - FOWNER
-              - SETGID
-              - SETUID
-            mountCgroup:
-              - SYS_ADMIN
-              - SYS_CHROOT
-              - SYS_PTRACE
-            applySysctlOverwrites:
-              - SYS_ADMIN
-              - SYS_CHROOT
-              - SYS_PTRACE
-            cleanCiliumState:
-              - NET_ADMIN
-              # Used in iptables. Consider removing once we are iptables-free
-              - SYS_MODULE
-              - SYS_RESOURCE
-              - PERFMON
-              - BPF
         bgpControlPlane:
           enabled: true
         pprof: