Add SYS_ADMIN capability to the server container

This will let us run perf(1) on the zed-server to debug
any performance problems we encounter in production.

Co-Authored-By: Nathan Sobo <nathan@zed.dev>
This commit is contained in:
Max Brunsfeld 2021-09-29 14:53:20 -07:00
parent 7599ac1e8c
commit 39ac723f5e

View file

@ -76,3 +76,8 @@ spec:
secretKeyRef:
name: github
key: privateKey
securityContext:
capabilities:
# FIXME - Switch to the more restrictive `PERFMON` capability.
# This capability isn't yet available in a stable version of Debian.
add: ["SYS_ADMIN"]