airship
/
divingbell
Code Issues Proposed changes

Ensure divingbell pods are restricted from acquiring new privileges 

Change-Id: I490dc3eca045855c590d01a3b25653f2fe1b305d
This commit is contained in:
francisy 2020-11-13 21:51:01 -05:00
parent 55ba4cb61c
commit 4567578295
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
divingbell/values.yaml
View File

@ -120,6 +120,7 @@ pod:
divingbell:
pod:
runAsUser: 65534
allowPrivilegeEscalation: false
container:
apt:
readOnlyRootFilesystem: true
@ -147,6 +148,7 @@ pod:
mounts:
readOnlyRootFilesystem: true
runAsUser: 0
allowPrivilegeEscalation: true
perm:
readOnlyRootFilesystem: true
runAsUser: 0