remove from container

2025-05-15 19:13:04 -05:00
parent 73960f711d
commit 95663f8442
1 changed files with 5 additions and 3 deletions
--- a/clusters/cl01tl/services/talos/values.yaml
+++ b/clusters/cl01tl/services/talos/values.yaml
@@ -7,9 +7,6 @@ etcd-backup:
          runAsUser: 1000
          runAsGroup: 1000
          runAsNonRoot: true
-          capabilities:
-            drop:
-              - ALL
          seccompProfile:
            type: RuntimeDefault
        affinity:
@@ -42,6 +39,11 @@ etcd-backup:
          command:
            - /talos-backup
          workingDir: /tmp
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
          env:
            - name: AWS_ACCESS_KEY_ID
              valueFrom: