Skip to content

Commit 302da9e

Browse files
committed
Update busybox securityContext
Signed-off-by: Todd Short <[email protected]>
1 parent 84b4f20 commit 302da9e

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

test/e2e/cluster_extension_install_test.go

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1027,8 +1027,17 @@ func TestClusterExtensionRecoversFromExistingDeploymentWhenFailureFixed(t *testi
10271027
ImagePullPolicy: corev1.PullAlways,
10281028
Name: "busybox",
10291029
SecurityContext: &corev1.SecurityContext{
1030-
RunAsNonRoot: ptr.To(true),
1031-
RunAsUser: ptr.To(int64(1000)),
1030+
RunAsNonRoot: ptr.To(true),
1031+
RunAsUser: ptr.To(int64(1000)),
1032+
AllowPrivilegeEscalation: ptr.To(false),
1033+
Capabilities: &corev1.Capabilities{
1034+
Drop: []corev1.Capability{
1035+
"ALL",
1036+
},
1037+
},
1038+
SeccompProfile: &corev1.SeccompProfile{
1039+
Type: corev1.SeccompProfileTypeRuntimeDefault,
1040+
},
10321041
},
10331042
},
10341043
},

0 commit comments

Comments
 (0)