disable privilege escalation

minrk · minrk · commit c36ab2c95fec · 2021-02-05T13:16:46.000+01:00
disallows sudo, etc.
diff --git a/mybinder/values.yaml b/mybinder/values.yaml
@@ -218,6 +218,8 @@ binderhub:
       extraConfig:
         neverRestart: |
           c.KubeSpawner.extra_pod_config.update({'restart_policy': 'Never'})
+        noPrivilegeEscalation: |
+          c.KubeSpawner.allow_privilege_escalation = False
         noAuthMetrics: |
           c.JupyterHub.authenticate_prometheus = False
       service:
