From 91e17ae5059652dbfe8a7cc95a9b6bb30b5e2200 Mon Sep 17 00:00:00 2001
From: ppawlowski <piotr@devopswizards.com>
Date: Wed, 28 Feb 2024 22:46:02 +0100
Subject: [PATCH] Drop all capabilities for init container

---
 helm/flowforge/templates/deployment.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/helm/flowforge/templates/deployment.yaml b/helm/flowforge/templates/deployment.yaml
index 71acdac4..934791b1 100644
--- a/helm/flowforge/templates/deployment.yaml
+++ b/helm/flowforge/templates/deployment.yaml
@@ -39,6 +39,10 @@ spec:
             mountPath: /tmpl
           - name: configdir
             mountPath: /config
+        securityContext:
+          capabilities:
+            drop:
+              - ALL
         env:
           - name: PGPASSWORD
             valueFrom: