github/kubeshark
1
0
Fork 0
mirror of https://github.com/kubeshark/kubeshark.git synced 2025-09-09 22:41:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

🔨 Remove the unnecessary Linux capabilities

Browse Source
This commit is contained in:
M. Mert Yildiran
2023-12-04 22:39:21 +03:00
parent b4dc321829
commit cf3ce0180b
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
helm-chart/templates/09-worker-daemon-set.yaml
View File

@@ -67,11 +67,10 @@ spec:
add: add:
- NET_RAW - NET_RAW
- NET_ADMIN - NET_ADMIN
- SYS_ADMIN {{- if not .Values.tap.noKernelModule }}
- SYS_PTRACE
- DAC_OVERRIDE
- SYS_MODULE - SYS_MODULE
- CHECKPOINT_RESTORE - CHECKPOINT_RESTORE
{{- end }}
drop: drop:
- ALL - ALL
readinessProbe: readinessProbe:
@@ -120,13 +119,10 @@ spec:
securityContext: securityContext:
capabilities: capabilities:
add: add:
- NET_RAW
- NET_ADMIN
- SYS_ADMIN - SYS_ADMIN
- SYS_PTRACE - SYS_PTRACE
- DAC_OVERRIDE - DAC_OVERRIDE
- SYS_RESOURCE - SYS_RESOURCE
- CHECKPOINT_RESTORE
drop: drop:
- ALL - ALL
volumeMounts: volumeMounts: