diff --git a/kubernetes/job/prowler.yaml b/kubernetes/job/prowler.yaml index c48d52a..4d5cdbc 100644 --- a/kubernetes/job/prowler.yaml +++ b/kubernetes/job/prowler.yaml @@ -1,14 +1,19 @@ apiVersion: batch/v1 kind: Job metadata: - name: prowler + name: prowler spec: - template: - spec: - containers: - - image: gcr.io/soluble-repo/soluble-prowler:latest - name: prowler - imagePullPolicy: Always - #command: [ "/prowler/soluble-prowler" ] - args: [ "-M", "json,html" ] - restartPolicy: Never + template: + spec: + containers: + - image: gcr.io/soluble-repo/soluble-prowler:latest + name: prowler + imagePullPolicy: Always + #command: [ "/prowler/soluble-prowler" ] + args: ["-M", "json,html"] + securityContext: + capabilities: + drop: + - NET_RAW + - ALL + restartPolicy: Never