Remove 'allowPrivilegeEscalation: false'
Setting this somehow prevents MetalLB from starting on CoreOS-based
clusters, even though it works fine on minikube and ubuntu+kubeadm
clusters. This option was only present for additional hardening, so
I'm disabling it temporarily to improve compatibility while I debug.
@@ -130,7 +130,8 @@ spec:
cpu: "0.1"
memory: "100Mi"
securityContext:
- allowPrivilegeEscalation: false
+ # Temporarily disabled due to #21
+ #allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
securityContext:
runAsNonRoot: true
@@ -178,7 +179,8 @@ spec:
cpu: "0.1"
memory: "100Mi"
securityContext:
- allowPrivilegeEscalation: false
+ # Temporarily disabled due to #21
+ #allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
securityContext:
runAsNonRoot: true
