bitnami / bitnami/sealed-secrets
Secure the Controller by avoiding privilege escalation issue
Open
backlog
chart
enhancement
security
- Dominant language
- Go
- Stars
- 9.3k
- Forks
- 776
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 30
Description
**Which component**:
Controller
**Is your feature request related to a problem? Please describe.**
There are some Privilege Escalation issues in the Controller
See vulnerability IDs in the vulnerability database : https://avd.aquasec.com
KSV001, KS020, KS021
**Describe the solution you'd like**
You should add these statements in the securityContext :
allowPrivilegeEscalation: false
runAsUser: UID
runAsGroup: GID
Here the UID and GID assigned should be greater than 10 000
**Describe alternatives you've considered**
No Alternative solution.
**Additional context**
None.
Contributor guide
Assessment
This issue has not been assessed yet.