[ingress-nginx] upgrade to 1.13.3 (#12604)

2026-03-25 19:18:29 +03:00 · 2025-10-09 04:04:59 +02:00
parent f8e74aafb9
commit fd7f39043b
6 changed files with 33 additions and 19 deletions
--- a/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/ds-ingress-nginx-controller.yml.j2
+++ b/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/ds-ingress-nginx-controller.yml.j2
@@ -95,14 +95,18 @@ spec:
            - --validating-webhook-key=/usr/local/certificates/key
 {% endif %}
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
-                drop:
-                  - ALL
-                add:
-                  - NET_BIND_SERVICE
-            # www-data -> 101
+              add:
+              - NET_BIND_SERVICE
+              drop:
+              - ALL
+            readOnlyRootFilesystem: false
+            runAsGroup: 82
+            runAsNonRoot: true
            runAsUser: 101
-            allowPrivilegeEscalation: true
+            seccompProfile:
+              type: RuntimeDefault
          env:
            - name: POD_NAME
              valueFrom: