From 8628856c86dac1a4f9b65ee4d9d475439a46f590 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lucas=20K=C3=A4ldstr=C3=B6m?= <lucas@weave.works>
Date: Thu, 15 Jun 2017 19:04:51 +0300
Subject: [PATCH] kubeadm: Fix kube-proxy regression caused by #46372

---
 cmd/kubeadm/app/phases/addons/manifests.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cmd/kubeadm/app/phases/addons/manifests.go b/cmd/kubeadm/app/phases/addons/manifests.go
index 36a91efb15b..f0c261e96c4 100644
--- a/cmd/kubeadm/app/phases/addons/manifests.go
+++ b/cmd/kubeadm/app/phases/addons/manifests.go
@@ -72,6 +72,8 @@ spec:
         - /usr/local/bin/kube-proxy
         - --kubeconfig=/var/lib/kube-proxy/kubeconfig.conf
         {{ .ClusterCIDR }}
+        securityContext:
+          privileged: true
         volumeMounts:
         - mountPath: /var/lib/kube-proxy
           name: kube-proxy
@@ -79,8 +81,6 @@ spec:
         - mountPath: /run/xtables.lock
           name: xtables-lock
           readOnly: false
-      securityContext:
-        privileged: true
       hostNetwork: true
       serviceAccountName: kube-proxy
       # TODO: Why doesn't the Decoder recognize this new field and decode it properly? Right now it's ignored