Skip to content

Commit

Permalink
[Tobiko] Add CAP_AUDIT_WRITE capability
Browse files Browse the repository at this point in the history
The tobiko image uses sudo command that requires a CAP_AUDIT_WRITE
capabilities in order to be able to write to kernel audit log. If
the capability is missing we get the following error msg:

"sudo: unable to send audit message: Operation not permitted"

The message has no influence on successful execution of the tests but
can be confusing for the users of the test-operator. Therefore we are
enabling the capability by default.
  • Loading branch information
lpiwowar committed Feb 16, 2024
1 parent 861958a commit a877bc7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pkg/tobiko/job.go
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ func Job(
VolumeMounts: GetVolumeMounts(mountCerts, mountKeys),
SecurityContext: &corev1.SecurityContext{
Capabilities: &corev1.Capabilities{
Add: []corev1.Capability{"NET_ADMIN", "NET_RAW"},
Add: []corev1.Capability{"NET_ADMIN", "NET_RAW", "CAP_AUDIT_WRITE"},
},
},
},
Expand Down

0 comments on commit a877bc7

Please sign in to comment.