Skip to content
This repository was archived by the owner on Oct 14, 2020. It is now read-only.

Commit 4067331

Browse files
committed
Add commentes to operator securityContext
1 parent 00bcc1f commit 4067331

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

operator/values.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,17 @@ image:
1515
pullPolicy: IfNotPresent
1616

1717
securityContext:
18+
# securityContext.runAsNonRoot -- Enforces that the Operator image is run as a non root user
1819
runAsNonRoot: true
20+
# securityContext.readOnlyRootFilesystem -- Prevents write access to the containers file system
1921
readOnlyRootFilesystem: true
22+
# securityContext.allowPrivilegeEscalation -- Ensures that users privilidges canout be escalated
2023
allowPrivilegeEscalation: false
24+
# securityContext.privileged -- Ensures that the operator container is not run in privilidged mode
2125
privileged: false
2226
capabilities:
2327
drop:
28+
# securityContext.capabilities.drop[0] -- This drops all linux privilidges from the operator container. They are not required
2429
- all
2530

2631
lurcher:

0 commit comments

Comments
 (0)