public_git/postgres-operator
1
0
Fork 0
mirror of https://github.com/zalando/postgres-operator.git synced 2026-10-09 00:07:47 +02:00
Code Issues Projects Releases Wiki Activity

set AllowPrivilegeEscalation on container securityContext (#1326)

Browse Source
This commit is contained in:
Felix Kunde
2021-01-22 14:06:19 +01:00
committed by GitHub
parent a9b677c957
commit 4ea0b5f432
4 changed files with 26 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/postgres-operator/templates/clusterrole-postgres-pod.yaml
+2
View File
@@ -63,6 +63,7 @@ rules:
- services
verbs:
- create
{{- if toString .Values.configKubernetes.spilo_privileged | eq "true" }}
# to run privileged pods
- apiGroups:
- extensions
@@ -72,4 +73,5 @@ rules:
- privileged
verbs:
- use
{{- end }}
{{ end }}
charts/postgres-operator/templates/clusterrole.yaml
+3 -1
View File
@@ -228,7 +228,8 @@ rules:
verbs:
- get
- create
# to grant privilege to run privileged pods
{{- if toString .Values.configKubernetes.spilo_privileged | eq "true" }}
# to run privileged pods
- apiGroups:
- extensions
resources:
@@ -237,4 +238,5 @@ rules:
- privileged
verbs:
- use
{{- end }}
{{ end }}