Skip to content

Commit 36d3f67

Browse files
authored
add gateway permissions (#100)
* elevate gateway privileges * bump chart version
1 parent 77517e8 commit 36d3f67

File tree

2 files changed

+9
-2
lines changed

2 files changed

+9
-2
lines changed

charts/defguard-gateway/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,5 @@ name: defguard-gateway
33
description: Defguard gateway is a public-facing VPN endpoint.
44

55
type: application
6-
version: 0.4.0
6+
version: 0.4.1
77
appVersion: 1.5.1

charts/defguard-gateway/values.yaml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,14 @@ resources: {}
4242
# defguard-gateway pod security context
4343
podSecurityContext: {}
4444
# defguard-gateway container security context
45-
securityContext: {}
45+
# elevated priveleges are required for managing network interfaces
46+
securityContext:
47+
allowPrivilegeEscalation: true
48+
privileged: true
49+
capabilities:
50+
add:
51+
- NET_ADMIN
52+
- SYS_MODULE
4653
# defguard-gateway pod additional ENV from configmap
4754
additionalEnvFromConfigMap: ""
4855
# defguard-gateway health check configuration

0 commit comments

Comments
 (0)