Merge "Ingress: Fix security context for pod/container"
This commit is contained in:
commit
1f1482bcb7
@ -57,23 +57,23 @@ pod:
|
|||||||
capabilities:
|
capabilities:
|
||||||
add:
|
add:
|
||||||
- SYS_MODULE
|
- SYS_MODULE
|
||||||
allowPrivilegeEscalation: false
|
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
runAsUser: 0
|
||||||
ingress_vip_init:
|
ingress_vip_init:
|
||||||
capabilities:
|
capabilities:
|
||||||
add:
|
add:
|
||||||
- NET_ADMIN
|
- NET_ADMIN
|
||||||
allowPrivilegeEscalation: false
|
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
ingress:
|
|
||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
|
ingress:
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
|
runAsUser: 0
|
||||||
ingress_vip:
|
ingress_vip:
|
||||||
capabilities:
|
capabilities:
|
||||||
add:
|
add:
|
||||||
- NET_ADMIN
|
- NET_ADMIN
|
||||||
allowPrivilegeEscalation: false
|
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
runAsUser: 0
|
||||||
affinity:
|
affinity:
|
||||||
anti:
|
anti:
|
||||||
type:
|
type:
|
||||||
|
Loading…
x
Reference in New Issue
Block a user