Merge pull request #158 from maxime1907/fixcapa

fix(oauth2-proxy): drop capabilities of wait redis container
oauth2-proxy · Jul 12, 2023 · 4ef43d1 · 4ef43d1
2 parents a501b0a + 5bd9ca8
commit 4ef43d1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/helm/oauth2-proxy/Chart.yaml b/helm/oauth2-proxy/Chart.yaml
@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 6.15.1
+version: 6.15.2
 apiVersion: v2
 appVersion: 7.4.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/
@@ -35,9 +35,7 @@ kubeVersion: ">=1.9.0-0"
 annotations:
   artifacthub.io/changes: |
     - kind: fixed
-      description: Created a workaround to fix the EKS bug related to Capabilities.KubeVersion.Minor in clusters with version 1.25+
+      description: Drop capabilities of wait-for-redis container
       links:
-        - name: Github Issue
-          url: https://github.com/oauth2-proxy/manifests/issues/155
         - name: Github PR
-          url: https://github.com/oauth2-proxy/manifests/pull/157
+          url: https://github.com/oauth2-proxy/manifests/pull/158
diff --git a/helm/oauth2-proxy/templates/deployment.yaml b/helm/oauth2-proxy/templates/deployment.yaml
@@ -71,6 +71,9 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 65534
+          capabilities:
+            drop:
+            - ALL
       {{- end }}
       containers:
       - name: {{ .Chart.Name }}