Drop Linux capabilities

Signed-off-by: GitHub <noreply@github.com>
2022-02-01 09:25:21 +00:00
parent 6bfb07aac2
commit 931af3241d
14 changed files with 58 additions and 2 deletions
--- a/manifests/grafana-deployment.yaml
+++ b/manifests/grafana-deployment.yaml
@@ -47,6 +47,9 @@ spec:
            memory: 100Mi
        securityContext:
          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /var/lib/grafana