From 859f37db5f10ea03af795d067d6114ba595f33c9 Mon Sep 17 00:00:00 2001 From: Martyn Ranyard Date: Mon, 13 Nov 2023 20:25:53 +0100 Subject: [PATCH] Templating yaml with string templaters is a bad idea folks. Signed-off-by: Martyn Ranyard --- everything-app/app-cilium.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/everything-app/app-cilium.yaml b/everything-app/app-cilium.yaml index 202e8ac..3cbf98e 100644 --- a/everything-app/app-cilium.yaml +++ b/everything-app/app-cilium.yaml @@ -19,9 +19,9 @@ spec: - name: kubeProxyReplacement value: "true" - name: securityContext.capabilities.ciliumAgent - value: {CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID} + value: "{CHOWN,KILL,NET_ADMIN,NET_RAW,IPC_LOCK,SYS_ADMIN,SYS_RESOURCE,DAC_OVERRIDE,FOWNER,SETGID,SETUID}" - name: securityContext.capabilities.cleanCiliumState - value: {NET_ADMIN,SYS_ADMIN,SYS_RESOURCE} + value: "{NET_ADMIN,SYS_ADMIN,SYS_RESOURCE}" - name: cgroup.autoMount.enabled value: "false" - name: cgroup.hostRoot