Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Jan Waś <[email protected]>
  • Loading branch information
LittleWat and nineinchnick authored May 22, 2024
1 parent c51a86d commit 5ca416c
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions charts/trino/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -267,11 +267,13 @@ securityContext:
runAsUser: 1000
runAsGroup: 1000

# -- SecurityContext configuration for containers
# -- [Container security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) configuration.
containerSecurityContext:
allowPrivilegeEscalation: false # Control whether a process can gain more privileges than its parent process.
# -- Control whether a process can gain more privileges than its parent process.
allowPrivilegeEscalation: false
capabilities:
drop: # List of Linux kernel capabilities that are dropped from every container. Valid values are listed at https://man7.org/linux/man-pages/man7/capabilities.7.html Ensure to remove the "CAP_" prefix which the kernel attaches to the names of permissions.
# -- A list of the Linux kernel capabilities that are dropped from every container. Valid values are listed at https://man7.org/linux/man-pages/man7/capabilities.7.html Ensure to remove the "CAP_" prefix which the kernel attaches to the names of permissions.
drop:
- ALL

shareProcessNamespace:
Expand Down

0 comments on commit 5ca416c

Please sign in to comment.