Containers must be dropping all capabilities, and only adding the ones they need. #18359
Labels
area/che-operator
Issues and PRs related to Eclipse Che Kubernetes Operator
kind/enhancement
A feature request - must adhere to the feature request template.
severity/P1
Has a major impact to usage or development of the system.
Milestone
Is your enhancement related to a problem? Please describe.
For best security practices containers must implement the principle of least privilege to minimize security risks by explicitly dropping ALL capabilities and only adding ones they need.
Describe the solution you'd like
The following deployments should have drop ALL
Example:
Describe alternatives you've considered
Additional context
The text was updated successfully, but these errors were encountered: