Merge pull request #1818 from minrk/disallow-privilege-escalation

minrk · web-flow · commit 4112c6a8c104 · 2021-02-08T11:19:38.000Z
disable privilege escalation
diff --git a/mybinder/values.yaml b/mybinder/values.yaml
@@ -218,6 +218,8 @@ binderhub:
       extraConfig:
         neverRestart: |
           c.KubeSpawner.extra_pod_config.update({'restart_policy': 'Never'})
+        noPrivilegeEscalation: |
+          c.KubeSpawner.allow_privilege_escalation = False
         noAuthMetrics: |
           c.JupyterHub.authenticate_prometheus = False
       service:
