From 5f9e2a1f66df7eb4958943c2f15751188c7fb051 Mon Sep 17 00:00:00 2001
From: clare cheng <chengxb8@chinaunicom.cn>
Date: Wed, 24 Apr 2019 14:18:08 +0800
Subject: [PATCH] Adding allowPrivilegeEscalation flag in horizon chart

Change-Id: Iff205444eb4c842a0f85d5999d063256106dbe75
---
 horizon/templates/deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/horizon/templates/deployment.yaml b/horizon/templates/deployment.yaml
index a0e0042a28..1da4553a88 100644
--- a/horizon/templates/deployment.yaml
+++ b/horizon/templates/deployment.yaml
@@ -62,6 +62,7 @@ spec:
 {{ dict "envAll" $envAll "application" "horizon" "container" "horizon" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
           securityContext:
             runAsUser: 0
+            allowPrivilegeEscalation: false
           command:
             - /tmp/horizon.sh
             - start