Skip to content

Commit 941b38c

Browse files
authored
update to drop all capabilities security context (CrunchyData#3305)
[sc-14936]
1 parent 7ed8677 commit 941b38c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

config/manager/manager.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,7 @@ spec:
4040
value: "registry.developers.crunchydata.com/crunchydata/crunchy-postgres-exporter:ubi8-5.1.2-0"
4141
securityContext:
4242
allowPrivilegeEscalation: false
43+
capabilities: { drop: [ALL] }
4344
readOnlyRootFilesystem: true
4445
runAsNonRoot: true
4546
serviceAccountName: pgo

0 commit comments

Comments
 (0)