github/kubeshark
1
0
Fork 0
mirror of https://github.com/kubeshark/kubeshark.git synced 2025-09-08 05:49:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

🔨 Remove the unnecessary Linux capabilities

Browse Source
This commit is contained in:
M. Mert Yildiran
2023-12-04 22:39:21 +03:00
parent b4dc321829
commit cf3ce0180b
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
helm-chart/templates/09-worker-daemon-set.yaml
View File

@@ -67,11 +67,10 @@ spec:
add:
- NET_RAW
- NET_ADMIN
- SYS_ADMIN
- SYS_PTRACE
- DAC_OVERRIDE
{{- if not .Values.tap.noKernelModule }}
- SYS_MODULE
- CHECKPOINT_RESTORE
{{- end }}
drop:
- ALL
readinessProbe:
@@ -120,13 +119,10 @@ spec:
securityContext:
capabilities:
add:
- NET_RAW
- NET_ADMIN
- SYS_ADMIN
- SYS_PTRACE
- DAC_OVERRIDE
- SYS_RESOURCE
- CHECKPOINT_RESTORE
drop:
- ALL
volumeMounts: