Add drop capabilities to container security context

FlowFuse · Feb 29, 2024 · 13de524 · 13de524
1 parent 381494a
commit 13de524
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helm/flowforge/values.yaml b/helm/flowforge/values.yaml
@@ -97,6 +97,9 @@ forge:
   containerSecurityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
 
   livenessProbe:
     initialDelaySeconds: 10