explicitly allow privilege escalation

stackrox · Apr 22, 2024 · 575f456 · 575f456
1 parent 77da060
commit 575f456
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/deploy/deployment.yaml.gotpl b/deploy/deployment.yaml.gotpl
@@ -76,6 +76,7 @@ spec:
           securityContext:
             readOnlyRootFilesystem: true
           {{ if .NeedsPrivileged }}
+            allowPrivilegeEscalation: true
             privileged: true
           {{ end }}
       containers: