K8s + CRI-o. +NET_RAW in HELM

General Discussions
,
1

Hi All,

I can get network access by adding RAW_NET to the yaml file

Now I try to do the same through HELM, Any suggestions?

agents.podSecurity.privileged – If true, Allow to run privileged containers

privileged: true

# agents.podSecurity.capabilities -- Allowed capabilities
## capabilities must contain all agents.containers.*.securityContext.capabilities.
capabilities:
  - SYS_ADMIN
  - SYS_RESOURCE
  - SYS_PTRACE
  - NET_ADMIN
  - NET_BROADCAST
  - NET_RAW
  - IPC_LOCK
  - CHOWN
  - AUDIT_CONTROL
  - AUDIT_READ

OR just enable RAW_NET by default for all pods.

Cluster information:

Kubernetes version:1.23.6
Cloud being used: (put bare-metal if not on a public cloud)
Installation method:
Host OS: linux
CNI and version:
CRI and version: 1.23

You can format your yaml by highlighting it and pressing Ctrl-Shift-C, it will make your output easier to read.