michael/k8s-mgmt-pod
1
0
Fork 0
Code Issues 1 Pull requests 8 Projects Releases 1 Packages 1 Wiki Activity Actions

Add SYS_CHROOT capability to container security context
All checks were successful
Build k8s-mgmt-pod image / Build & Push (push) Successful in 28s
Details

Browse source
This commit is contained in:
Michael Trip 2026-06-23 16:00:46 +02:00
parent 5584dc1f29
commit 795d3844dc
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
k8s/deployment.yaml
View file

@ -85,7 +85,7 @@ spec:
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
add: ["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETGID", "SETUID"] add: ["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETGID", "SETUID", "SYS_CHROOT"]
volumes: volumes:
- name: state - name: state
emptyDir: {} emptyDir: {}