diff --git a/masakarimonitors/privsep.py b/masakarimonitors/privsep.py index af505b9..993807f 100644 --- a/masakarimonitors/privsep.py +++ b/masakarimonitors/privsep.py @@ -12,7 +12,6 @@ # See the License for the specific language governing permissions and # limitations under the License. -from oslo_privsep import capabilities as c from oslo_privsep import priv_context @@ -20,5 +19,5 @@ monitors_priv = priv_context.PrivContext( "masakarimonitors", cfg_section="masakarimonitors_privileged", pypath=__name__ + ".monitors_priv", - capabilities=[c.CAP_NET_ADMIN], + capabilities=[], ) diff --git a/releasenotes/notes/drop-cap-net-admin-8d7d7cfb274e9547.yaml b/releasenotes/notes/drop-cap-net-admin-8d7d7cfb274e9547.yaml new file mode 100644 index 0000000..a159e14 --- /dev/null +++ b/releasenotes/notes/drop-cap-net-admin-8d7d7cfb274e9547.yaml @@ -0,0 +1,5 @@ +--- +other: + - | + Masakari hostmonitor and processmonitor will no longer require + ``CAP_NET_ADMIN`` capability.