From 10bb315b3bdf54f30622f915251763f6527c28e6 Mon Sep 17 00:00:00 2001
From: Tyler Perkins <tyler@clortox.com>
Date: Sat, 9 Nov 2024 19:12:37 -0500
Subject: [PATCH] disable priv

---
 cluster/postgresql/helmrelease-postgresql.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cluster/postgresql/helmrelease-postgresql.yaml b/cluster/postgresql/helmrelease-postgresql.yaml
index 05c2033..254e20a 100644
--- a/cluster/postgresql/helmrelease-postgresql.yaml
+++ b/cluster/postgresql/helmrelease-postgresql.yaml
@@ -488,7 +488,7 @@ spec:
         runAsUser: 1001
         runAsGroup: 0
         runAsNonRoot: true
-        allowPrivilegeEscalation: true
+        allowPrivilegeEscalation: false
         seccompProfile:
           type: RuntimeDefault
         capabilities: