Do not add the SYS_ADMIN cap for egress (#81)

livekit · Sep 7, 2023 · 9d7538c · 9d7538c
1 parent 80687be
commit 9d7538c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/egress-sample.yaml b/egress-sample.yaml
@@ -10,6 +10,7 @@ egress:
   log_level: info
   health_port: 8080
   prometheus_port: 9090
+  enable_chrome_sandbox: true
   # template_base: "https://your-custom-template.com"
   redis:
     address: <redis_host:port>

diff --git a/egress/values.yaml b/egress/values.yaml
@@ -36,10 +36,7 @@ podAnnotations:
 
 podSecurityContext: {}
 
-securityContext:
-  capabilities:
-    add:
-      - SYS_ADMIN
+securityContext: {}
 
 tolerations: []