set AllowPrivilegeEscalation on container securityContext

2026-10-19 13:56:32 +02:00 · 2021-01-22 12:09:59 +01:00
parent a9b677c957
commit c524f9d652
4 changed files with 26 additions and 21 deletions
@@ -453,8 +453,9 @@ func generateContainer(
 		VolumeMounts: volumeMounts,
 		Env:          envVars,
 		SecurityContext: &v1.SecurityContext{
-			Privileged:             &privilegedMode,
-			ReadOnlyRootFilesystem: util.False(),
+			AllowPrivilegeEscalation: &privilegedMode,
+			Privileged:               &privilegedMode,
+			ReadOnlyRootFilesystem:   util.False(),
 		},
 	}
 }