Added security context for container

DFE-Digital · Jul 3, 2024 · fd045af · fd045af
1 parent 6cded61
commit fd045af
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/aks/application/resources.tf b/aks/application/resources.tf
@@ -172,6 +172,11 @@ resource "kubernetes_deployment" "main" {
             seccomp_profile {
               type = "RuntimeDefault"
             }
+
+            capabilities {
+              drop = ["ALL"]
+              add  = ["NET_BIND_SERVICE"]
+            }
           }
         }
       }