From def5d0ac60154ece43fccda103a0856b10ce4c4d Mon Sep 17 00:00:00 2001 From: Alexandre Pires Date: Wed, 25 Sep 2024 21:11:09 +0200 Subject: [PATCH] Refactor security context in m3uproxy.tf --- terraform/k8sapps/m3uproxy.tf | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/terraform/k8sapps/m3uproxy.tf b/terraform/k8sapps/m3uproxy.tf index 9131d28..889284b 100644 --- a/terraform/k8sapps/m3uproxy.tf +++ b/terraform/k8sapps/m3uproxy.tf @@ -222,8 +222,9 @@ resource "kubernetes_deployment" "proxy_pt" { } security_context { - run_as_user = 1000 - run_as_group = 1000 + allow_privilege_escalation = false + run_as_user = 1000 + run_as_group = 1000 } } @@ -346,8 +347,9 @@ resource "kubernetes_deployment" "m3uproxy" { } security_context { - run_as_user = 1000 - run_as_group = 1000 + allow_privilege_escalation = false + run_as_user = 1000 + run_as_group = 1000 } volume_mount {