Do not use privileged containers for worker init

2025-09-16 14:53:49 +00:00 · 2024-12-26 09:27:28 +02:00
parent 639f1deb51
commit 014036ffcf
1 changed files with 6 additions and 2 deletions
--- a/helm-chart/templates/09-worker-daemon-set.yaml
+++ b/helm-chart/templates/09-worker-daemon-set.yaml
@@ -38,7 +38,9 @@ spec:
          imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }}
          name: check-bpf
          securityContext:
-            privileged: true
+            capabilities:
+              add:
+                - CAP_SYS_ADMIN 
          volumeMounts:
          - mountPath: /sys
            name: sys
@@ -54,7 +56,9 @@ spec:
          imagePullPolicy: {{ .Values.tap.docker.imagePullPolicy }}
          name: init-bpf
          securityContext:
-            privileged: true
+            capabilities:
+              add:
+                - CAP_SYS_ADMIN 
          volumeMounts:
          - mountPath: /sys
            name: sys