apps: Upgraded node local dns to v1.25.0 and dropped priviledged

elastisys · Jan 30, 2025 · 5fb8dcd · 5fb8dcd
1 parent 7b9cad4
commit 5fb8dcd
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml b/helmfile.d/charts/node-local-dns/templates/node-local-dns.yaml
@@ -145,11 +145,13 @@ spec:
         operator: "Exists"
       containers:
       - name: node-cache
-        image: registry.k8s.io/dns/k8s-dns-node-cache:1.23.1
+        image: registry.k8s.io/dns/k8s-dns-node-cache:1.25.0
         resources: {{- toYaml .Values.resources | nindent 10 }}
         args: [ "-localip", "{{ .Values.localIP }},{{ .Values.clusterDNS }}", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream"]
         securityContext:
-          privileged: true
+          capabilities:
+            add:
+              - NET_ADMIN
         ports:
         - containerPort: 53
           name: dns