update nodelocaldns 1.22.8

ezdown

@@ -23,7 +23,7 @@ REGISTRY_MIRROR=CN
 
 # images downloaded by default(with '-D')
 calicoVer=v3.23.3
-dnsNodeCacheVer=1.21.1
+dnsNodeCacheVer=1.22.8
 corednsVer=1.9.3
 dashboardVer=v2.5.1
 dashboardMetricsScraperVer=v1.0.8

roles/cluster-addon/templates/dns/nodelocaldns-iptables.yaml.j2

@@ -146,7 +146,9 @@ spec:
             memory: 5Mi
         args: [ "-localip", "{{ LOCAL_DNS_CACHE }},{{ CLUSTER_DNS_SVC_IP }}", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]
         securityContext:
-          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
         ports:
         - containerPort: 53
           name: dns

roles/cluster-addon/templates/dns/nodelocaldns-ipvs.yaml.j2

@@ -146,7 +146,9 @@ spec:
             memory: 5Mi
         args: [ "-localip", "{{ LOCAL_DNS_CACHE }}", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]
         securityContext:
-          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
         ports:
         - containerPort: 53
           name: dns