Tighten container security: FB - Event collection

sassoftware · Dec 23, 2024 · 41dfff1 · 41dfff1
1 parent 0cb3bcf
commit 41dfff1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/logging/fb/fluent-bit_helm_values_events.yaml b/logging/fb/fluent-bit_helm_values_events.yaml
@@ -39,6 +39,8 @@ securityContext:
   runAsNonRoot: true
   runAsUser: 1001
   readOnlyRootFilesystem: true
+  capabilities:
+    drop: ["ALL"]
 
 podSecurityContext:
   seccompProfile: