Merge pull request #24 from olhado/add_permission

Add SYS_NICE to address an issue seen on GKE COS.

Author: olhado

TSKubernetesDaemonSet.yaml

@@ -64,7 +64,7 @@ spec:
       hostPID: true
       serviceAccountName: threatstack-agent
       containers:
-      - image: threatstack/ts-docker2:2.3.2
+      - image: threatstack/ts-docker2:2.3.3
         imagePullPolicy: Always
         name: threatstack-agent
         env:
@@ -75,7 +75,7 @@ spec:
         securityContext:
           privileged: false
           capabilities:
-            add: ["AUDIT_CONTROL", "SYS_ADMIN", "SYS_PTRACE"]
+            add: ["AUDIT_CONTROL", "SYS_ADMIN", "SYS_PTRACE", "SYS_NICE"]
         resources:
           requests:
             memory: "256Mi"
@@ -116,7 +116,7 @@ spec:
       hostNetwork: true
       hostPID: true
       containers:
-      - image: threatstack/ts-docker2:2.3.2
+      - image: threatstack/ts-docker2:2.3.3
         imagePullPolicy: Always
         name: threatstack-agent
         env:
@@ -127,7 +127,7 @@ spec:
         securityContext:
           privileged: false
           capabilities:
-            add: ["AUDIT_CONTROL", "SYS_ADMIN", "SYS_PTRACE"]
+            add: ["AUDIT_CONTROL", "SYS_ADMIN", "SYS_PTRACE", "SYS_NICE"]
         resources:
           requests:
             memory: "256Mi"