Skip to content

Commit 677a9ce

Browse files
committed
fix: set capabilities drop to caps in patches
In #1067 the capabilities was changed to caps, but some kustomize patches were setting the securtity context. Those patches do not need to set a security context, because they don't alter the context from the "main" deploment manifest.
1 parent 647745d commit 677a9ce

File tree

2 files changed

+0
-16
lines changed

2 files changed

+0
-16
lines changed

config/default/base/manager_webhook_patch.yaml

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,6 @@ spec:
1616
- mountPath: /tmp/k8s-webhook-server/serving-certs
1717
name: cert
1818
readOnly: true
19-
securityContext:
20-
allowPrivilegeEscalation: false
21-
capabilities:
22-
drop:
23-
- All
24-
runAsNonRoot: true
25-
seccompProfile:
26-
type: RuntimeDefault
2719
volumes:
2820
- name: cert
2921
secret:

config/default/manager_webhook_patch.yaml

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,6 @@ spec:
1616
- mountPath: /tmp/k8s-webhook-server/serving-certs
1717
name: cert
1818
readOnly: true
19-
securityContext:
20-
allowPrivilegeEscalation: false
21-
capabilities:
22-
drop:
23-
- All
24-
runAsNonRoot: true
25-
seccompProfile:
26-
type: RuntimeDefault
2719
volumes:
2820
- name: cert
2921
secret:

0 commit comments

Comments
 (0)