sheppy/opendesk
1
0
Fork 0
mirror of https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git synced 2025-12-06 23:41:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(collabora): Reduce Collabora's securityContext capabilities.

Browse Source
This commit is contained in:
Thorsten Roßner
2024-10-02 12:03:19 +02:00
parent b9db81f69d
commit a7ea701cc6
1 changed files with 1 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
helmfile/apps/collabora/values.yaml.gotmpl
View File

@@ -118,17 +118,9 @@ securityContext:
- "ALL" - "ALL"
add: add:
- "CHOWN" - "CHOWN"
- "DAC_OVERRIDE"
- "FOWNER" - "FOWNER"
- "FSETID"
- "KILL"
- "SETGID"
- "SETUID"
- "SETPCAP"
- "NET_BIND_SERVICE"
- "NET_RAW"
- "SYS_CHROOT" - "SYS_CHROOT"
- "MKNOD"
seLinuxOptions: seLinuxOptions:
{{ .Values.seLinuxOptions.collabora | toYaml | nindent 4 }} {{ .Values.seLinuxOptions.collabora | toYaml | nindent 4 }}
serviceAccount: serviceAccount: