adjust SYS_ADMIN to CAP_SYS_ADMIN

Signed-off-by: Simon L. <[email protected]>
nextcloud · Nov 21, 2024 · e6a0b19 · e6a0b19
1 parent cf6adc1
commit e6a0b19
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/manual-install/latest.yml b/manual-install/latest.yml
@@ -217,7 +217,7 @@ services:
       - collabora
     cap_add:
       - MKNOD
-      - SYS_ADMIN
+      - CAP_SYS_ADMIN
     cap_drop:
       - NET_RAW
 

diff --git a/nextcloud-aio-helm-chart/update-helm.sh b/nextcloud-aio-helm-chart/update-helm.sh
@@ -54,6 +54,8 @@ yq -i 'del(.services.[].tmpfs)' latest.yml
 yq -i 'del(.services.[].cap_drop)' latest.yml
 # Remove SYS_NICE for imaginary as it is not supported with RPSS
 sed -i "s|- SYS_NICE$|- NET_BIND_SERVICE|" latest.yml
+# cap SYS_ADMIN is called CAP_SYS_ADMIN in k8s
+sed -i "s|- SYS_ADMIN$|- CAP_SYS_ADMIN|" latest.yml
 
 cat latest.yml
 kompose convert -c -f latest.yml --namespace nextcloud-aio-namespace