We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 89c1720 + f9edb09 commit bab684dCopy full SHA for bab684d
src/utils/components/ExportModal/utils.ts
@@ -109,6 +109,10 @@ export const createUploaderPod: CreateUploaderPodType = ({
109
memory: '3Gi',
110
},
111
112
+ securityContext: {
113
+ allowPrivilegeEscalation: false,
114
+ capabilities: { drop: ['ALL'] },
115
+ },
116
volumeMounts: [
117
{
118
mountPath: '/tmp',
@@ -118,6 +122,12 @@ export const createUploaderPod: CreateUploaderPodType = ({
122
119
123
],
120
124
restartPolicy: 'Never',
125
126
+ runAsNonRoot: true,
127
+ seccompProfile: {
128
+ type: 'RuntimeDefault',
129
130
121
131
serviceAccountName: 'kubevirt-disk-uploader',
132
volumes: [
133
0 commit comments