fix: add back privilege for ipv6

(cherry picked from commit 4917afe)
kubeovn · Jun 19, 2020 · b1ea8a3 · b1ea8a3
1 parent 2a87753
commit b1ea8a3
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 8 deletions.
diff --git a/dist/images/Dockerfile b/dist/images/Dockerfile
@@ -51,8 +51,8 @@ COPY 01-kube-ovn.conflist /kube-ovn/01-kube-ovn.conflist
 
 WORKDIR /kube-ovn
 
+COPY kube-ovn-speaker /kube-ovn/kube-ovn-speaker
+COPY kube-ovn-pinger /kube-ovn/kube-ovn-pinger
 COPY kube-ovn /kube-ovn/kube-ovn
 COPY kube-ovn-daemon /kube-ovn/kube-ovn-daemon
-COPY kube-ovn-pinger /kube-ovn/kube-ovn-pinger
 COPY kube-ovn-controller /kube-ovn/kube-ovn-controller
-COPY kube-ovn-speaker /kube-ovn/kube-ovn-speaker
diff --git a/dist/images/install.sh b/dist/images/install.sh
@@ -1044,8 +1044,8 @@ spec:
           - --network-type=$NETWORK_TYPE
           - --default-interface-name=$VLAN_INTERFACE_NAME
         securityContext:
-          capabilities:
-            add: ["NET_ADMIN", "SYS_ADMIN", "SYS_PTRACE"]
+          runAsUser: 0
+          privileged: true
         env:
           - name: POD_IP
             valueFrom:

diff --git a/yamls/kube-ovn-ipv6.yaml b/yamls/kube-ovn-ipv6.yaml
@@ -130,8 +130,8 @@ spec:
             - --mtu=1420
           imagePullPolicy: IfNotPresent
           securityContext:
-            capabilities:
-              add: ["NET_ADMIN", "SYS_ADMIN"]
+            runAsUser: 0
+            privileged: true
           env:
             - name: POD_IP
               valueFrom:

diff --git a/yamls/kube-ovn.yaml b/yamls/kube-ovn.yaml
@@ -129,8 +129,8 @@ spec:
         args:
           - --enable-mirror=true
         securityContext:
-          capabilities:
-            add: ["NET_ADMIN", "SYS_ADMIN", "SYS_PTRACE"]
+          runAsUser: 0
+          privileged: true
         env:
           - name: POD_IP
             valueFrom: