From 621efe4a6ac26ddc64df53e395ecea1a20954d1c Mon Sep 17 00:00:00 2001
From: zsolt <57558440+ktzsolt@users.noreply.github.com>
Date: Thu, 13 Jun 2024 18:15:18 +0200
Subject: [PATCH] pod.yaml remove linux capabilities

---
 pod.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pod.yaml b/pod.yaml
index c7312cb..e981c18 100644
--- a/pod.yaml
+++ b/pod.yaml
@@ -41,6 +41,11 @@ spec:
       securityContext:
         allowPrivilegeEscalation: false # prevent sudo, etc.
         privileged: false               # prevent acting like host root
+        capabilities:                   # linux capabilities 
+          drop:                         # remove all capabilities
+            - ALL
+          # add:                        # add only those capabilities that is needed
+          #  - NET_ADMIN
   
   terminationGracePeriodSeconds: 600 # default is 30, but you may need more time to gracefully shutdown (HTTP long polling, user uploads, etc)