Merge pull request #109 from DFE-Digital/1890-security-aks-container-…

…hardening-capabilities Added capabilities to container security context
DFE-Digital · Jul 4, 2024 · d74e687 · d74e687
2 parents 6cded61 + 9869533
commit d74e687
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/aks/application/resources.tf b/aks/application/resources.tf
@@ -172,6 +172,11 @@ resource "kubernetes_deployment" "main" {
             seccomp_profile {
               type = "RuntimeDefault"
             }
+
+            capabilities {
+              drop = ["ALL"]
+              add  = ["NET_BIND_SERVICE"]
+            }
           }
         }
       }