helm: disable privilege escalation

Saremox · Jun 13, 2024 · 5d52a9d · 5d52a9d
1 parent 204f1a8
commit 5d52a9d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/charts/redisoperator/Chart.yaml b/charts/redisoperator/Chart.yaml
@@ -4,7 +4,7 @@ appVersion: 1.4.0
 apiVersion: v1
 description: A Helm chart for the Spotahome Redis Operator
 name: redis-operator
-version: 3.5.3
+version: 3.5.4
 home: https://github.com/saremox/redis-operator
 keywords:
   - "golang"

diff --git a/charts/redisoperator/values.yaml b/charts/redisoperator/values.yaml
@@ -53,6 +53,7 @@ container:
 # Container [security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container).
 # See the [API reference](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#security-context-1) for details.
 securityContext:
+  allowPrivilegeEscalation: false
   readOnlyRootFilesystem: true
   fsGroup: 1000
   runAsGroup: 1000