martyn
/
infra4talos
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Templating yaml with string templaters is a bad idea folks. 

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
This commit is contained in:
Martyn 2023-11-13 20:25:53 +01:00
parent 2fe62fa486
commit 859f37db5f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
everything-app/app-cilium.yaml
View File

@ -19,9 +19,9 @@ spec:
- name: kubeProxyReplacement
value: "true"
- name: securityContext.capabilities.ciliumAgent
value: {CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}
value: "{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}"
- name: securityContext.capabilities.cleanCiliumState
value: {NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}
value: "{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}"
- name: cgroup.autoMount.enabled
value: "false"
- name: cgroup.hostRoot