KEP-1441: update sysadmin profile to remove CAP_SYS_ADMIN and add privileged

eiffel-fl · eiffel-fl · commit 8f9daa2d0443 · 2023-09-29T17:27:25.000+03:00
Signed-off-by: Francis Laniel &lt;flaniel@linux.microsoft.com&gt;
diff --git a/keps/sig-cli/1441-kubectl-debug/README.md b/keps/sig-cli/1441-kubectl-debug/README.md
@@ -389,11 +389,11 @@ Probes and labels continue to be stripped from Pod copies.
 
 #### Profile: sysadmin
 
-| Journey             | Debug Container Behavior                                                   |
-| ------------------- | -------------------------------------------------------------------------- |
-| Node                | sets `SYS_ADMIN` and privileged; uses host namespaces                      |
-| Pod Copy            | sets `SYS_ADMIN` on debugging container                                    |
-| Ephemeral Container | sets `SYS_ADMIN` on ephemeral container                                    |
+| Journey             | Debug Container Behavior               |
+| ------------------- | -------------------------------------- |
+| Node                | sets privileged; uses host namespaces  |
+| Pod Copy            | sets privileged on debugging container |
+| Ephemeral Container | sets privileged on ephemeral container |
 
 This profile offers elevated privileges for system debugging.
 
