Add NET_BIND_SERVICE capability to Consul's restricted securityContext

hashicorp · Aug 21, 2023 · 2d13dbf · 2d13dbf
1 parent e5ad447
commit 2d13dbf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/charts/consul/templates/_helpers.tpl b/charts/consul/templates/_helpers.tpl
@@ -22,6 +22,8 @@ securityContext:
   capabilities:
     drop:
     - ALL
+    add:
+    - NET_BIND_SERVICE
   runAsNonRoot: true
   seccompProfile:
     type: RuntimeDefault