add allowPrivilegeEscalation: false to securityContext for metrics 0.5.0

rancher · Sep 16, 2022 · bfd3683 · bfd3683
1 parent 3cc288b
commit bfd3683
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/rke/templates/metrics_v0.5.0.go b/rke/templates/metrics_v0.5.0.go
@@ -213,6 +213,7 @@ spec:
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
+          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /tmp
           name: tmp-dir