From ca17360e405e50dd30e5a9fbd1770851b032d91b Mon Sep 17 00:00:00 2001
From: friedrich goerz <friedrich.goerz@netgo.de>
Date: Wed, 16 Nov 2022 22:47:03 +0100
Subject: [PATCH] DEV-669: podSec. restricted is enabled in namespace but pod
 not completely confiogured

---
 values_nsodev.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/values_nsodev.yaml b/values_nsodev.yaml
index 98c1f1c..f009294 100644
--- a/values_nsodev.yaml
+++ b/values_nsodev.yaml
@@ -25,6 +25,8 @@ tenant:
         volumeClaimTemplate:
           spec:
             storageClassName: hcloud-volumes
+      securityContext:
+        allowPrivilegeEscalation: false
   ingress:
     api:
       enabled: true