github.com/SUSE/skuba@v1.4.17/pkg/skuba/actions/cluster/init/manifests.go (about)

     1  /*
     2   * Copyright (c) 2019 SUSE LLC.
     3   *
     4   * Licensed under the Apache License, Version 2.0 (the "License");
     5   * you may not use this file except in compliance with the License.
     6   * You may obtain a copy of the License at
     7   *
     8   *     http://www.apache.org/licenses/LICENSE-2.0
     9   *
    10   * Unless required by applicable law or agreed to in writing, software
    11   * distributed under the License is distributed on an "AS IS" BASIS,
    12   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13   * See the License for the specific language governing permissions and
    14   * limitations under the License.
    15   *
    16   */
    17  
    18  package cluster
    19  
    20  const (
    21  	criDockerDefaultsConf = `## Path           : System/Management
    22  ## Description    : Extra cli switches for crio daemon
    23  ## Type           : string
    24  ## Default        : ""
    25  ## ServiceRestart : crio
    26  #
    27  CRIO_OPTIONS=--pause-image={{.PauseImage}}{{if not .StrictCapDefaults}} --default-capabilities="CHOWN,DAC_OVERRIDE,FSETID,FOWNER,NET_RAW,SETGID,SETUID,SETPCAP,NET_BIND_SERVICE,SYS_CHROOT,KILL,MKNOD,AUDIT_WRITE,SETFCAP"{{end}}`
    28  	criDefaultsConf = `{{if not .StrictCapDefaults}}[crio.runtime]
    29  
    30  default_capabilities = [
    31  	"CHOWN",
    32  	"DAC_OVERRIDE",
    33  	"FSETID",
    34  	"FOWNER",
    35  	"NET_RAW",
    36  	"SETGID",
    37  	"SETUID",
    38  	"SETPCAP",
    39  	"NET_BIND_SERVICE",
    40  	"SYS_CHROOT",
    41  	"KILL",
    42  	"MKNOD",
    43  	"AUDIT_WRITE",
    44  	"SETFCAP",
    45  ]{{end}}
    46  
    47  [crio.image]
    48  
    49  pause_image = "{{.PauseImage}}"
    50  `
    51  )