From ba914e3f670967928dadeebd68b535262bfbbdc5 Mon Sep 17 00:00:00 2001 From: "Javier J. Salmeron Garcia" Date: Fri, 1 Feb 2019 16:51:47 +0100 Subject: [PATCH] [bitnami/nginx-ingress-controller] Require NET_BIND_SERVICE only when using hostNetwork --- bitnami/nginx-ingress-controller/Chart.yaml | 2 +- .../templates/controller-deployment.yaml | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/bitnami/nginx-ingress-controller/Chart.yaml b/bitnami/nginx-ingress-controller/Chart.yaml index 90e4031f5..2fc1f4c59 100644 --- a/bitnami/nginx-ingress-controller/Chart.yaml +++ b/bitnami/nginx-ingress-controller/Chart.yaml @@ -1,5 +1,5 @@ name: nginx-ingress-controller -version: 3.1.3 +version: 3.2.0 appVersion: 0.22.0 description: Chart for the nginx Ingress controller keywords: diff --git a/bitnami/nginx-ingress-controller/templates/controller-deployment.yaml b/bitnami/nginx-ingress-controller/templates/controller-deployment.yaml index 7b62f443f..41e8cf7de 100644 --- a/bitnami/nginx-ingress-controller/templates/controller-deployment.yaml +++ b/bitnami/nginx-ingress-controller/templates/controller-deployment.yaml @@ -79,10 +79,12 @@ spec: - --{{ $key }} {{- end }} {{- end }} +{{- if .Values.hostNetwork }} securityContext: capabilities: drop: ["ALL"] add: ["NET_BIND_SERVICE"] +{{- end }} env: - name: POD_NAME valueFrom: