alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 9 Actions Packages Projects Releases Wiki Activity

change security context

Browse Source
This commit is contained in:
Alex Lebens
2024-08-21 23:56:27 -05:00
parent e2238ffbc7
commit 67e0fa3811
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
clusters/cl01tl/standalone/cilium/values.yaml
View File

@@ -9,6 +9,7 @@ cilium:
- NET_ADMIN - NET_ADMIN
- NET_RAW - NET_RAW
- IPC_LOCK - IPC_LOCK
- NET_BIND_SERVICE
- SYS_ADMIN - SYS_ADMIN
- SYS_RESOURCE - SYS_RESOURCE
- DAC_OVERRIDE - DAC_OVERRIDE
@@ -19,6 +20,10 @@ cilium:
- NET_ADMIN - NET_ADMIN
- SYS_ADMIN - SYS_ADMIN
- SYS_RESOURCE - SYS_RESOURCE
envoy:
securityContext:
capabilities:
keepCapNetBindService: true
enableK8sEndpointSlice: true enableK8sEndpointSlice: true
enableCiliumEndpointSlice: false enableCiliumEndpointSlice: false
ingressController: ingressController: