Use authbind to bind privileged ports

2018-08-03 09:50:53 -04:00 · 2018-08-03 09:50:53 -04:00 · b148f113ae
commit b148f113ae
parent e2f5d9066e
14 changed files with 48 additions and 69 deletions
--- a/test/manifests/ingress-controller/mandatory.yaml
+++ b/test/manifests/ingress-controller/mandatory.yaml
@ -260,6 +260,14 @@ spec:
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
+          securityContext:
+            capabilities:
+                drop:
+                - ALL
+                add:
+                - NET_BIND_SERVICE
+            # www-data -> 33
+            runAsUser: 33
          ports:
          - name: http
            containerPort: 80