bitnami / bitnami/sealed-secrets

Secure the Controller by avoiding privilege escalation issue

Open
#802 2 comments 0 reactions 1 assignee Claimed by @alemorcuq View on GitHub
backlog chart enhancement security
Dominant language
Go
Stars
9.3k
Forks
776
Avg merge
1d 13h
Merged PRs (30d)
30

Description

**Which component**:
Controller

**Is your feature request related to a problem? Please describe.**
There are some Privilege Escalation issues in the Controller
See vulnerability IDs in the vulnerability database : https://avd.aquasec.com
KSV001, KS020, KS021

**Describe the solution you'd like**
You should add these statements in the securityContext :
allowPrivilegeEscalation: false
runAsUser: UID
runAsGroup: GID

Here the UID and GID assigned should be greater than 10 000

**Describe alternatives you've considered**
No Alternative solution.

**Additional context**
None.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.