[logstash] disable privileged container in psp (#1000)

elastic · Jan 12, 2021 · 2ce8f7f · 2ce8f7f
1 parent ae168fd
commit 2ce8f7f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/logstash/tests/logstash_test.py b/logstash/tests/logstash_test.py
@@ -789,7 +789,7 @@ def test_pod_security_policy():
         r["statefulset"][name]["spec"]["template"]["spec"]["serviceAccountName"] == name
     )
     psp_spec = r["podsecuritypolicy"][name]["spec"]
-    assert psp_spec["privileged"] is True
+    assert psp_spec["privileged"] is False
 
 
 def test_external_pod_security_policy():

diff --git a/logstash/values.yaml b/logstash/values.yaml
@@ -104,7 +104,7 @@ podSecurityPolicy:
   create: false
   name: ""
   spec:
-    privileged: true
+    privileged: false
     fsGroup:
       rule: RunAsAny
     runAsUser: