Merge pull request #1593 from prometheus-operator/as/forbid-privilege-scalation

Explicitly declare allowPrivilegeEscalation to false in all components
2022-01-24 10:38:33 +00:00
parent 90ad3c99fc 2d02121731
commit 4d004393e1
13 changed files with 49 additions and 2 deletions
--- a/manifests/grafana-deployment.yaml
+++ b/manifests/grafana-deployment.yaml
@@ -45,6 +45,8 @@ spec:
          requests:
            cpu: 100m
            memory: 100Mi
+        securityContext:
+          allowPrivilegeEscalation: false
        volumeMounts:
        - mountPath: /var/lib/grafana
          name: grafana-storage