mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-04 09:49:50 +00:00
kubeadm coredns use drop ALL instead of all
This commit is contained in:
parent
b3314270eb
commit
fb0ffb07a7
@ -742,7 +742,7 @@ spec:
|
|||||||
add:
|
add:
|
||||||
- NET_BIND_SERVICE
|
- NET_BIND_SERVICE
|
||||||
drop:
|
drop:
|
||||||
- all
|
- ALL
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
dnsPolicy: Default
|
dnsPolicy: Default
|
||||||
volumes:
|
volumes:
|
||||||
@ -1007,7 +1007,7 @@ spec:
|
|||||||
add:
|
add:
|
||||||
- NET_BIND_SERVICE
|
- NET_BIND_SERVICE
|
||||||
drop:
|
drop:
|
||||||
- all
|
- ALL
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
dnsPolicy: Default
|
dnsPolicy: Default
|
||||||
volumes:
|
volumes:
|
||||||
|
@ -141,7 +141,7 @@ spec:
|
|||||||
add:
|
add:
|
||||||
- NET_BIND_SERVICE
|
- NET_BIND_SERVICE
|
||||||
drop:
|
drop:
|
||||||
- all
|
- ALL
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
dnsPolicy: Default
|
dnsPolicy: Default
|
||||||
volumes:
|
volumes:
|
||||||
|
Loading…
Reference in New Issue
Block a user