From 5fa4cd1b13bd7d39bfb3f0c1803f514fe4230f90 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Luis=20P=C3=A9rez?= Date: Wed, 25 Sep 2024 12:34:21 -0400 Subject: [PATCH] this is definitely containerd --- paasta_tools/kubernetes_tools.py | 1 - 1 file changed, 1 deletion(-) diff --git a/paasta_tools/kubernetes_tools.py b/paasta_tools/kubernetes_tools.py index b1627a410c..a61c9cfcdb 100644 --- a/paasta_tools/kubernetes_tools.py +++ b/paasta_tools/kubernetes_tools.py @@ -1403,7 +1403,6 @@ def get_security_context(self) -> Optional[V1SecurityContext]: # NOTE: this is necessary as containerd differs in behavior from dockershim: in dockershim # dropped capabilities were overriden if the same capability was added - but in containerd # the dropped capabilities appear to have higher priority. - # (or maybe this is a k8s behavior change?) drop=list(set(CAPS_DROP) - set(cap_add)), ) )