)]}'
{"calico/templates/daemonset-calico-node.yaml":[{"author":{"_account_id":8749,"name":"Evgeniy L","email":"eli@mirantis.com","username":"evgeniyl"},"change_message_id":"1e51e6078c25e289120f3e155cfdc2f7d17900db","unresolved":false,"context_lines":[{"line_number":340,"context_line":"                  fieldPath: spec.nodeName"},{"line_number":341,"context_line":""},{"line_number":342,"context_line":"          securityContext:"},{"line_number":343,"context_line":"            privileged: false"},{"line_number":344,"context_line":"            capabilities:"},{"line_number":345,"context_line":"              add:"},{"line_number":346,"context_line":"                - \u0027NET_ADMIN\u0027"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"9fdfeff1_4dd0d11f","line":343,"range":{"start_line":343,"start_character":12,"end_line":343,"end_character":29},"updated":"2019-02-28 20:29:07.000000000","message":"Isn\u0027t it false by default? Can it be removed?","commit_id":"df54b65bff2012ebcd207bd3eaf411941b2ca723"},{"author":{"_account_id":28718,"name":"Doug Aaser","email":"douglas.aaser@att.com","username":"daaser"},"change_message_id":"781fe44f2ca1a5321bb64067479c26351a3beb81","unresolved":false,"context_lines":[{"line_number":340,"context_line":"                  fieldPath: spec.nodeName"},{"line_number":341,"context_line":""},{"line_number":342,"context_line":"          securityContext:"},{"line_number":343,"context_line":"            privileged: false"},{"line_number":344,"context_line":"            capabilities:"},{"line_number":345,"context_line":"              add:"},{"line_number":346,"context_line":"                - \u0027NET_ADMIN\u0027"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"9fdfeff1_086077ce","line":343,"range":{"start_line":343,"start_character":12,"end_line":343,"end_character":29},"in_reply_to":"9fdfeff1_4dd0d11f","updated":"2019-02-28 20:41:03.000000000","message":"It is technically redundant. I think this way it makes it more clear that the pod is unprivileged but is not necessary for the functionality.","commit_id":"df54b65bff2012ebcd207bd3eaf411941b2ca723"},{"author":{"_account_id":8749,"name":"Evgeniy L","email":"eli@mirantis.com","username":"evgeniyl"},"change_message_id":"1e51e6078c25e289120f3e155cfdc2f7d17900db","unresolved":false,"context_lines":[{"line_number":345,"context_line":"              add:"},{"line_number":346,"context_line":"                - \u0027NET_ADMIN\u0027"},{"line_number":347,"context_line":"                - \u0027SYS_ADMIN\u0027"},{"line_number":348,"context_line":"                - \u0027SYS_PTRACE\u0027"},{"line_number":349,"context_line":"          resources:"},{"line_number":350,"context_line":"            requests:"},{"line_number":351,"context_line":"              cpu: 250m"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"9fdfeff1_cd95a1e5","line":348,"range":{"start_line":348,"start_character":19,"end_line":348,"end_character":29},"updated":"2019-02-28 20:29:07.000000000","message":"I\u0027m just curious, do you know why does it require PTRACE capability?","commit_id":"df54b65bff2012ebcd207bd3eaf411941b2ca723"},{"author":{"_account_id":28718,"name":"Doug Aaser","email":"douglas.aaser@att.com","username":"daaser"},"change_message_id":"781fe44f2ca1a5321bb64067479c26351a3beb81","unresolved":false,"context_lines":[{"line_number":345,"context_line":"              add:"},{"line_number":346,"context_line":"                - \u0027NET_ADMIN\u0027"},{"line_number":347,"context_line":"                - \u0027SYS_ADMIN\u0027"},{"line_number":348,"context_line":"                - \u0027SYS_PTRACE\u0027"},{"line_number":349,"context_line":"          resources:"},{"line_number":350,"context_line":"            requests:"},{"line_number":351,"context_line":"              cpu: 250m"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"9fdfeff1_48af5fe2","line":348,"range":{"start_line":348,"start_character":19,"end_line":348,"end_character":29},"in_reply_to":"9fdfeff1_cd95a1e5","updated":"2019-02-28 20:41:03.000000000","message":"This is still a WIP so I actually don\u0027t think it needs SYS_PTRACE. I was getting errors with curl and saw something about it needs ptrace capabilities but the issue turned out to be something else, so I\u0027m gonna remove this.","commit_id":"df54b65bff2012ebcd207bd3eaf411941b2ca723"}]}