Add NET_BIND_SERVICE capability to Consul's restricted securityContext

hashicorp · Aug 17, 2023 · cf95d32 · cf95d32
1 parent 5b9cd46
commit cf95d32
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/charts/consul/templates/_helpers.tpl b/charts/consul/templates/_helpers.tpl
@@ -37,6 +37,8 @@ securityContext:
   capabilities:
     drop:
     - ALL
+    add:
+    - NET_BIND_SERVICE
   runAsNonRoot: true
   seccompProfile:
     type: RuntimeDefault