Removing some capabilities from nginx
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
@@ -45,12 +45,6 @@ initContainers:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
add:
|
||||
- CHOWN
|
||||
- DAV_OVERRIDE
|
||||
- SETGID
|
||||
- SETUID
|
||||
- NET_BIND_SERVICE
|
||||
seccompProfile:
|
||||
type: "RuntimeDefault"
|
||||
volumeMounts:
|
||||
|
||||
Reference in New Issue
Block a user