Support for cap_add,cap_drop

[gitlawr]

Currently these keys are marked as unsupported and kompose generates WARNINGs when they are used. But I think there is equivalent in Kubernetes.
see:
https://kubernetes.io/docs/concepts/policy/container-capabilities/
My proposal is to convert cap_add/cap_drop to Pod.Spec.Container.SecurityContext.capabilities.add/drop
For example with such a docker-compose.yml

version: "2"

services:
    hello-world:
        image: alpine:3.4
        command: ["/bin/echo", "hello", "world"]
        cap_add:
          - SYS_NICE
        cap_drop:
          - KILL

kompose generate

metadata:
  labels:
    service: hello-world
spec:
  containers:
  - image: "alpine:3.4"
    command: ["/bin/echo", "hello", "world"]
    securityContext:
      capabilities:
        add:
        - SYS_NICE
        drop:
        - KILL

[kadel]

Hi @gitlawr, You are right, it looks like this is something that could be added to Kompose

[gitlawr]

Hi @kadel . In that case, can I add a PR for this or wait for someone to handle it? I'm familiar with k8s but not with openshift by the way.

[kadel]

You definitely can 😉 , that would be great 👍 , thank you! 💛

That is OK, you can start with doing it just for k8s. Once you send PR with k8s I can help with OpenShift bits, it should be easy once its done for Kubernetes.