change security context

2024-08-21 23:56:27 -05:00
parent e2238ffbc7
commit 67e0fa3811
1 changed files with 5 additions and 0 deletions
--- a/clusters/cl01tl/standalone/cilium/values.yaml
+++ b/clusters/cl01tl/standalone/cilium/values.yaml
@@ -9,6 +9,7 @@ cilium:
        - NET_ADMIN
        - NET_RAW
        - IPC_LOCK
+        - NET_BIND_SERVICE
        - SYS_ADMIN
        - SYS_RESOURCE
        - DAC_OVERRIDE
@@ -19,6 +20,10 @@ cilium:
        - NET_ADMIN
        - SYS_ADMIN
        - SYS_RESOURCE
+  envoy:
+    securityContext:
+      capabilities:
+        keepCapNetBindService: true
  enableK8sEndpointSlice: true
  enableCiliumEndpointSlice: false
  ingressController: