Error in nginx when starting registry-proxy (#4785)

Error starting nginx because in requiredDropCapabilities is dropped all capabilities.

The nginx requires the following capabilities:
- CHOWN
- SETGID
- SETUID

Signed-off-by: André R. de Miranda <andre@miranda.work>
pull/4791/head
André R. de Miranda 2019-05-20 15:27:15 -03:00 committed by Kubernetes Prow Robot
parent 5d9946184a
commit 4bc204925a
1 changed files with 10 additions and 1 deletions

View File

@ -17,7 +17,16 @@ spec:
privileged: false
allowPrivilegeEscalation: false
requiredDropCapabilities:
- ALL
- SETPCAP
- MKNOD
- AUDIT_WRITE
- NET_RAW
- DAC_OVERRIDE
- FOWNER
- FSETID
- KILL
- SYS_CHROOT
- SETFCAP
volumes:
- 'configMap'
- 'emptyDir'