From 13de524a6999dd3786d55f17e5946eaf170cbba8 Mon Sep 17 00:00:00 2001
From: ppawlowski <piotr@devopswizards.com>
Date: Thu, 29 Feb 2024 10:41:31 +0100
Subject: [PATCH] Add drop capabilities to container security context

---
 helm/flowforge/values.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/helm/flowforge/values.yaml b/helm/flowforge/values.yaml
index d98ce972..19b2893d 100644
--- a/helm/flowforge/values.yaml
+++ b/helm/flowforge/values.yaml
@@ -97,6 +97,9 @@ forge:
   containerSecurityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
 
   livenessProbe:
     initialDelaySeconds: 10