Explicitly declare allowPrivilegeEscalation to false

Although containers that do not run as privileged already have this set to false by kubernetes
Kubespace [asks us](https://hub.armo.cloud/docs/c-0016) to explicitly declare it to false where not needed.

Signed-off-by: Arthur Silva Sens <arthursens2005@gmail.com>
This commit is contained in:
Arthur Silva Sens
2022-01-20 22:11:54 +00:00
committed by GitHub
parent f7d3019a8f
commit b60b302499
12 changed files with 48 additions and 1 deletions

View File

@@ -181,6 +181,9 @@ function(params) {
{ name: 'root', mountPath: '/host/root', mountPropagation: 'HostToContainer', readOnly: true },
],
resources: ne._config.resources,
securityContext: {
allowPrivilegeEscalation: false,
},
};
local kubeRbacProxy = krp({