Drop capabilities in Kubernetes DaemonSet example

2025-01-10 01:17:55 +03:00 · 2018-03-22 15:44:05 +00:00 · 2018-03-22 15:44:05 +00:00 · be0dbd62c1
commit be0dbd62c1
parent 1a411b658b
2 changed files with 11 additions and 2 deletions
--- a/docs/user-guide/kubernetes.md
+++ b/docs/user-guide/kubernetes.md
@ -121,6 +121,7 @@ spec:
        args:
        - --api
        - --kubernetes
+        - --logLevel=INFO
 ---
 kind: Service
 apiVersion: v1
@ -182,7 +183,11 @@ spec:
        - name: admin
          containerPort: 8080
        securityContext:
-          privileged: true
+          capabilities:
+            drop:
+            - ALL
+            add:
+            - NET_BIND_SERVICE
        args:
        - --api
        - --kubernetes
--- a/examples/k8s/traefik-ds.yaml
+++ b/examples/k8s/traefik-ds.yaml
@ -32,7 +32,11 @@ spec:
        - name: admin
          containerPort: 8080
        securityContext:
-          privileged: true
+          capabilities:
+            drop:
+            - ALL
+            add:
+            - NET_BIND_SERVICE
        args:
        - --api
        - --kubernetes