remove "privileged: true" and instead add "NET_ADMIN" capabilities

kubernetes-sigs / ip-masq-agent

Manage IP masquerade on nodes

Apache License 2.0

217 stars 70 forks source link

remove "privileged: true" and instead add "NET_ADMIN" capabilities #28

Closed ChenLingPeng closed 5 years ago

ChenLingPeng commented 5 years ago

in some k8s cluster we disable the privileged mode, in ip-masq-agent, we only need NET_ADMIN to configure iptables rules

fejta-bot commented 5 years ago

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta. /lifecycle stale

BenTheElder commented 5 years ago

This is done, though NET_RAW as well