feat: Drop all forge container capabilities (#334)

FlowFuse · Feb 29, 2024 · 0921ba1 · 0921ba1
2 parents 60d1ba0 + 13de524
commit 0921ba1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helm/flowforge/values.yaml b/helm/flowforge/values.yaml
@@ -95,6 +95,9 @@ forge:
   containerSecurityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
 
   livenessProbe:
     initialDelaySeconds: 10