mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-23 03:41:45 +00:00
Merge pull request #111694 from ialidzhikov/enh/unprivileged-node-local-dns
Run node-local-dns in non-privileged mode
This commit is contained in:
commit
6e46517905
@ -145,7 +145,9 @@ spec:
|
||||
memory: 5Mi
|
||||
args: [ "-localip", "__PILLAR__LOCAL__DNS__,__PILLAR__DNS__SERVER__", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]
|
||||
securityContext:
|
||||
privileged: true
|
||||
capabilities:
|
||||
add:
|
||||
- NET_ADMIN
|
||||
ports:
|
||||
- containerPort: 53
|
||||
name: dns
|
||||
|
Loading…
Reference in New Issue
Block a user