Explicitly declare allowPrivilegeEscalation to false

Although containers that do not run as privileged already have this set to false by kubernetes
Kubespace [asks us](https://hub.armo.cloud/docs/c-0016) to explicitly declare it to false where not needed.

Signed-off-by: Arthur Silva Sens <arthursens2005@gmail.com>
This commit is contained in:
Arthur Silva Sens
2022-01-20 22:11:54 +00:00
committed by GitHub
parent f7d3019a8f
commit b60b302499
12 changed files with 48 additions and 1 deletions

View File

@@ -43,6 +43,8 @@ spec:
requests:
cpu: 102m
memory: 180Mi
securityContext:
allowPrivilegeEscalation: false
volumeMounts:
- mountPath: /host/sys
mountPropagation: HostToContainer
@@ -76,6 +78,7 @@ spec:
cpu: 10m
memory: 20Mi
securityContext:
allowPrivilegeEscalation: false
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532