drop all

2024-10-22 16:19:04 +02:00
parent f06c7a9224
commit e03251c575
1 changed files with 3 additions and 0 deletions
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -39,6 +39,9 @@ spec:
          backend.containerSecurityContext:
          - name: allowPrivilegeEscalation
            value: false
+          capabilities:
+          - name: drop
+            value: 'ALL'
    chart: penpot
  destination:
    server: 'https://kubernetes.default.svc'