integ/kubernetes/kubernetes-unversioned/debian/deb_folder/patches/Remove-KUBE_ALLOW_PRIV-from-kubelet-service.patch
Ramesh Kumar Sivanandam b4af713109 Remove KUBE_ALLOW_PRIV from kubelet.service
KUBE_ALLOW_PRIV results in trying to run kubelet with the
"--allow-privileged=true" flag, which has not been supported by
kubelet since K8s 1.15 that in turn causes the kubelet to error out.

Default kubelet.service contains KUBE_ALLOW_PRIV invalid setting due
to the fact that the upstream kubernetes-contrib package hasn't been
updated in years.

This change removes KUBE_ALLOW_PRIV from kubelet.service in the
kubernetes-unversioned package.

Closes-Bug: 1998629

Test-plan:
PASS - Install AIO-SX and ensure that
       /lib/systemd/system/kubelet.service doesn't contain
       "$KUBE_ALLOW_PRIV"

Signed-off-by: Ramesh Kumar Sivanandam <rameshkumar.sivanandam@windriver.com>
Change-Id: Ide0f9c8db180908cc9c6528f474214966655be95
2022-12-07 09:18:07 -05:00

26 lines
777 B
Diff

From c7f3a7c54c3fc5bbf8708e98e4cef145eaeb6983 Mon Sep 17 00:00:00 2001
From: Ramesh Kumar Sivanandam <rameshkumar.sivanandam@windriver.com>
Date: Fri, 2 Dec 2022 18:55:34 +0530
Subject: [PATCH] Remove KUBE_ALLOW_PRIV from kubelet service
Signed-off-by: Ramesh Kumar Sivanandam <rameshkumar.sivanandam@windriver.com>
---
init/systemd/kubelet.service | 1 -
1 file changed, 1 deletion(-)
diff --git a/init/systemd/kubelet.service b/init/systemd/kubelet.service
index 1082bba..5808312 100644
--- a/init/systemd/kubelet.service
+++ b/init/systemd/kubelet.service
@@ -15,7 +15,6 @@ ExecStart=/usr/bin/kubelet \
$KUBELET_ADDRESS \
$KUBELET_PORT \
$KUBELET_HOSTNAME \
- $KUBE_ALLOW_PRIV \
$KUBELET_ARGS
Restart=on-failure
KillMode=process
--
2.17.1