github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Run node-local-dns in non-privileged mode

Browse Source
This commit is contained in:
ialidzhikov
2022-08-04 15:11:40 +03:00
parent ef7fc10460
commit bfe98c0c2a
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cluster/addons/dns/nodelocaldns/nodelocaldns.yaml
View File

@@ -145,7 +145,9 @@ spec:
memory: 5Mi memory: 5Mi
args: [ "-localip", "__PILLAR__LOCAL__DNS__,__PILLAR__DNS__SERVER__", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ] args: [ "-localip", "__PILLAR__LOCAL__DNS__,__PILLAR__DNS__SERVER__", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]
securityContext: securityContext:
privileged: true capabilities:
add:
- NET_ADMIN
ports: ports:
- containerPort: 53 - containerPort: 53
name: dns name: dns