Skip to content

K
k3s
Commit 3d10f004 authored by Eric Paris's avatar Eric Paris
Browse files
Options

Give kube-apiserver CAP_NET_BIND_SERVICE

It is needed to bind on port 443
parent e08bd6f3
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 0 deletions
contrib/ansible/roles/master/tasks/main.yml
View file @ 3d10f004
......@@ -20,6 +20,10 @@
notify:
- restart scheduler
- name: add cap_net_bind_service to kube-apiserver
capabilities: path=/usr/bin/kube-apiserver capability=cap_net_bind_service=ep state=present
when: not is_atomic
- name: Enable apiserver
service: name=kube-apiserver enabled=yes state=started
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment