Browse Source

Enable PodShareProcessNamespace feature gate

This feature is used by a number of OpenStack Helm pods, as well as the
kube-proxy pod now.

Change-Id: I3b4c1a94e66da2e712431486f8e2d0cbfe04fec4
changes/55/616255/2
Mark Burnett 2 years ago
committed by Kaspars Skels
parent
commit
662eeee241
3 changed files with 3 additions and 0 deletions
  1. +1
    -0
      global/profiles/genesis.yaml
  2. +1
    -0
      global/software/charts/kubernetes/core/apiserver.yaml
  3. +1
    -0
      global/software/config/Kubelet.yaml

+ 1
- 0
global/profiles/genesis.yaml View File

@ -87,6 +87,7 @@ data:
- --authorization-mode=Node,RBAC
- --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds
- --endpoint-reconciler-type=lease
- --feature-gates=PodShareProcessNamespace=true
armada:
target_manifest: cluster-bootstrap
labels:


+ 1
- 0
global/software/charts/kubernetes/core/apiserver.yaml View File

@ -130,6 +130,7 @@ data:
- --authorization-mode=Node,RBAC
- --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds
- --endpoint-reconciler-type=lease
- --feature-gates=PodShareProcessNamespace=true
dependencies:
- kubernetes-apiserver-htk
---


+ 1
- 0
global/software/config/Kubelet.yaml View File

@ -33,3 +33,4 @@ data:
- --kube-api-burst=40
- --kube-api-qps=20
- --seccomp-profile-root=SECCOMP_PROFILE_ROOT
- --feature-gates=PodShareProcessNamespace=true

Loading…
Cancel
Save