fix kube-vip container securityContext (#11647)

2024-10-22 00:42:52 +08:00 · 2024-10-22 00:42:52 +08:00 · 693eb74f52
parent 5aea2abc40
commit 693eb74f52
1 changed files with 5 additions and 0 deletions
--- a/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2
+++ b/roles/kubernetes/node/templates/manifests/kube-vip.manifest.j2
@ -104,11 +104,16 @@ spec:
    imagePullPolicy: {{ k8s_image_pull_policy }}
    name: kube-vip
    resources: {}
+{% if kube_vip_lb_fwdmethod == "masquerade" %}
+    securityContext:
+      privileged: true
+{% else %}
    securityContext:
      capabilities:
        add:
        - NET_ADMIN
        - NET_RAW
+{% endif %}
    volumeMounts:
    - mountPath: /etc/kubernetes/admin.conf
      name: kubeconfig