config

argocd/apps/penpot/penpot.yaml

@@ -37,10 +37,10 @@ spec:
         - name: ingress.annotations.cert-manager\.io\/cluster-issuer
           value: lets-encrypt-staging
           backend.containerSecurityContext:
-          - name: allowPrivilegeEscalation
+            allowPrivilegeEscalation: 'false'
-            value: 'false'
+            capabilities:
-          - name: capabilities.drop
+              drop:
-            value: '["ALL"]'
+                - ALL
     chart: penpot
   destination:
     server: 'https://kubernetes.default.svc'