Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

My Azure MSDefender detecded about "Linux capabilities should be enforced" How to chnage it? #9954

Closed
exodia0x opened this issue May 11, 2023 · 3 comments
Closed

My Azure MSDefender detecded about "Linux capabilities should be enforced" How to chnage it? #9954

exodia0x opened this issue May 11, 2023 · 3 comments
Labels
needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.

Comments

@exodia0x
Copy link

exodia0x commented May 11, 2023 •
edited
Loading

My Azure Microsoft Defender for cloud detected about this issues "Least privileged Linux capabilities should be enforced for containers" in Ingress pod. now i using helm chart to deploy pod now my config about capabilities is

capabilities:
drop:
ALL

add:
NET_BIND_SERVICE

That is default setting. In this case how can i change it because i didn't found Values or Parameter to change it in yaml file. or can fix it?
@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label May 11, 2023
@k8s-ci-robot
Copy link
Contributor

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@k8s-ci-robot k8s-ci-robot added needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-priority labels May 11, 2023
@longwuyuan
Copy link
Contributor

#3668 (comment)

/close

@k8s-ci-robot
Copy link
Contributor

@longwuyuan: Closing this issue.

In response to this:

#3668 (comment)

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs-priority needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one.
Projects
[SIG Network] Ingress NGINX
Archived in project
Milestone
No milestone
Development

No branches or pull requests
3 participants
@longwuyuan @k8s-ci-robot @exodia0x