[SECURITY] OpenSearch Dashboards pod: allowPrivilegeEscalation set to…

… false (#687)
sassoftware · Oct 9, 2024 · 95072ba · 95072ba
1 parent 3a5d64a
commit 95072ba
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,9 @@
 # SAS Viya Monitoring for Kubernetes
 
 ## Unreleased
+* **Logging**
+  * [SECURITY] OpenSearch Dashboards pod securityContext updated to set allowPrivilegeEscalation to 'false'
+
 * **Metrics**
   * [SECURITY] Metrics (collected by Kube State Metrics) related to Kubernetes Secret have been disabled 
 to eliminate the need to grant `list` permission (for Secret resources) to the KSM ClusterRole (see PR#684)

diff --git a/logging/opensearch/osd_helm_values.yaml b/logging/opensearch/osd_helm_values.yaml
@@ -68,3 +68,4 @@ config:
 
 securityContext:
   readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
Original file line number	Diff line number	Diff line change
Expand Up		@@ -68,3 +68,4 @@ config:

		securityContext:
		readOnlyRootFilesystem: true
		allowPrivilegeEscalation: false