From 8d6f605a5adc8cc1cd986eb8af45b8c7e262b971 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sat, 27 Aug 2022 00:41:38 +0200
Subject: k8s/kubeadm: upgrade node-local dns cache images

---
 .../kubeadm/control-plane/templates/node-local-dns.yml.j2           | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'roles/kubernetes/kubeadm')

diff --git a/roles/kubernetes/kubeadm/control-plane/templates/node-local-dns.yml.j2 b/roles/kubernetes/kubeadm/control-plane/templates/node-local-dns.yml.j2
index d536d5a7..b267424b 100644
--- a/roles/kubernetes/kubeadm/control-plane/templates/node-local-dns.yml.j2
+++ b/roles/kubernetes/kubeadm/control-plane/templates/node-local-dns.yml.j2
@@ -140,14 +140,16 @@ spec:
         operator: "Exists"
       containers:
       - name: node-cache
-        image: k8s.gcr.io/dns/k8s-dns-node-cache:1.16.0
+        image: registry.k8s.io/dns/k8s-dns-node-cache:1.22.8
         resources:
           requests:
             cpu: 25m
             memory: 5Mi
         args: [ "-localip", "{{ kubernetes_nodelocal_dnscache_ip }}", "-conf", "/etc/Corefile", "-upstreamsvc", "kube-dns-upstream" ]
         securityContext:
-          privileged: true
+          capabilities:
+            add:
+            - NET_ADMIN
         ports:
         - containerPort: 53
           name: dns
-- 
cgit v1.2.3