openstack/openstack-helm
Code Issues Proposed changes

OVS: update container privs

Browse Source 
This PS updates the privs granted to the OvS containers.

Change-Id: Ie50ae5692dbf67c19f55521a5cb46308480f737a
Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley 2018-07-30 17:43:38 -05:00
parent c88ed011db
commit 108d9606d7
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
openvswitch/templates/daemonset-ovs-db.yaml
View File

@ -51,7 +51,6 @@ spec:
{{ tuple $envAll $envAll.Values.pod.resources.ovs.db | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
securityContext:
runAsUser: 0
privileged: true
command:
- /tmp/openvswitch-db-server.sh
- start

4
openvswitch/templates/daemonset-ovs-vswitchd.yaml
View File

@ -68,7 +68,9 @@ spec:
{{ tuple $envAll $envAll.Values.pod.resources.ovs.vswitchd | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
securityContext:
runAsUser: 0
privileged: true
capabilities:
add:
- NET_ADMIN
# ensures this container can speak to the ovs database
# successfully before its marked as ready
readinessProbe: