Add missing capability (bank-vaults#1257)

Signed-off-by: David J. M. Karlsen <[email protected]>
rtnpro · Feb 15, 2021 · ac46ce9 · ac46ce9
1 parent 04a9602
commit ac46ce9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/operator/pkg/controller/vault/vault_controller.go b/operator/pkg/controller/vault/vault_controller.go
@@ -2019,7 +2019,7 @@ func withContainerSecurityContext(v *vaultv1alpha1.Vault) *corev1.SecurityContex
 	}
 	return &corev1.SecurityContext{
 		Capabilities: &corev1.Capabilities{
-			Add: []corev1.Capability{"IPC_LOCK"},
+			Add: []corev1.Capability{"IPC_LOCK", "SETFCAP"},
 		},
 	}
 }